ARE iptables -t mangle -A PREROUTING -j CONNMARK --restore-mark iptables -t mangle -A PREROUTING -m mark ! --mark -0x0 -j ACCEPT and iptables -t mangle -A PREROUTING -m connmark --ctstate RELATED, ESTABLISHED -j ACCEPT _exactly_ same or there can be any case/condition where this will fail ? -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html