Hello! I think 36th line of ipt_MARK which is (*pskb)->nfcache |= NFC_ALTERED; Should be removed. At least looking at that patch: http://lists.netfilter.org/pipermail/netfilter-devel/2005-July/020382.html -- Michał Margula, alchemyx@uznam.net.pl, http://alchemyx.uznam.net.pl/ "W życiu piękne są tylko chwile" [Ryszard Riedel]