Hi, Robert. Through POSTROUTING hook both forwarded packets and local originated packets pass. Obviously, there isn't input interface information in local originated packets. I don't know better way to do what you want than using of marks. 2017-07-04 2:56 GMT+03:00 Robert White <rwhite@xxxxxxxxx>: > Someone just pointed out that --in-interface is not legal in the > POSTROUTING rules. I can think of several reasons to use this > information directly at that point (instead of redundant marking ans so > forth). > > Does the in-interface information get lost somehow or is that just an > arbitrary restriction? > > > -- > To unsubscribe from this list: send the line "unsubscribe netfilter" in > the body of a message to majordomo@xxxxxxxxxxxxxxx > More majordomo info at http://vger.kernel.org/majordomo-info.html -- Anton. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html