Hello, i've got a question about the MARK target. Are the marks removed when the packets leave the machine? Or can anyone behind the firewall see them? If so they could confuse other machines using the marks for other things. I guess they are removed but i did not find a lot documentation. Henning