Hello again, Looks this is a tough topic, no one knows something about. No wonder, barely someone has similar need - but given that in Linux all is possible, even such a weird task shall be doable. I am still digging into this, and I can imagine two ways up to now: - First, find some way (sysctl setting?) that will permit ebtables/iptables to work on the raw vlan trunk, eth0. Then tell ebtables 'do what I tell you, don't think', u32 match CoS in offset 14, and accordingly modify DSCP in offset 20. After it is easy with iptables. This is the best solution I can imagine. - Second, do a small application using libnetfilter_queue which hooks on PREROUTING at eth0 and does the same. Writing C code needs thinking, so this is second-best. If someone has some thought about this, let discuss. I am heading to libnetfilter_queue for now, reluctantly. All the best, George. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html