Someone just pointed out that --in-interface is not legal in the POSTROUTING rules. I can think of several reasons to use this information directly at that point (instead of redundant marking ans so forth). Does the in-interface information get lost somehow or is that just an arbitrary restriction? -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html