At 19:15 2003. 09. 11.istory. +0200, you wrote: > > > > The picture you have in http://www.docum.org/stef.coene/qos/kptd is with > > (or without) the IMQ NAT patch? >Without. In prerouting, you see that IMQ is before nat. > >Stef With the IMQ NAT patch the order is reversed? The filtering on de-masqueraded addresses is only possible, if NAT is b e f o r e IMQ, isn't it? Tom