> Just to confirm: you are using a recent snapshot tarball of > 3.2 beta > releases to do this right? with the packet marking > netfilter libraries > built in? No, I'm actually using Squid Cache: Version 3.0.STABLE24 (the version that has really worked well for me) with iptables -t mangle marking packets.