Never mind seems I found it. Seems that the outbound packets were not getting marked. I had to add this line for that.
-A OUTPUT -p tcp --sport 80 -s 172.29.0.19 -j MARK --set-mark 4
Edited:
oh ya and added this to figure out out what was going on:
-A OUTPUT -p tcp --sport 80 -j LOG --log-level 4 --log-prefix "firewall debug http: "
Last edited by MikeyCarter; 06-20-2010 at 11:22 AM.
Reason: added something.
|