Eric Leblond wrote: > You don't have any connection tracking with mark. If you want some > you've got to use CONNMARK. Where can I find a few good working examples for CONNMARK? I haven't yet been able to use the CONNMARK patch on my firewall the way I tried to. Greetings, Hanno