> >>to mark packets which should be ACCEPTED? Does that help? > > AFAIK, MARK can only be used in mangle table, not in filter table That would be very strange, because it only set an integer value in the packet. I think that is available in all tables?