Ambroz Bizjak <ambrop7 <at> gmail.com> writes: > It's worth pointing out that packets coming in from interface A with > the destination address equal to the local address of interface B will > be considered INPUT, not FORWARD. Good point. I'll have to test that out. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html