Hi all i'd like to know if it is possible to mark packet and accept in the single iptable rule. i've these 2 rules: /usr/local/sbin/iptables -t mangle -A FORWARD -m layer7 --l7proto yahoo -j MARK --set-mark 74 /usr/local/sbin/iptables -t mangle -A FORWARD -m mark --mark 74 -j ACCEPT but it seam that the second rule is never match. can some one help me. regards. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html