W Agtail wrote: > Thanks Patrick for your comments too. > It seems that you can't mix PREROUTING with --sport or -o.
-o only works after routing. > I've also changed the ip rule tables to higher numbers, so I now have: > iptables -t mangle -A PREROUTING -p tcp --dport 8088 -i eth0 -j MARK > --set-mark 1 > iptables -t mangle -A PREROUTING -p tcp --dport 8089 -i eth0 -j MARK > --set-mark 2 You should really read some iptables tutorial or at least the manpage. Its quite easy to set up what you want, but you're again not properly marking the return traffic. - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html