Actually what he asks is a FAQ; the ingress is not even needed. It can be done via -m option in ipchains or iptables with policy routing. example: --- ipchains -A input -i eth1 -s 10.0.0.0/24 -m 1 ip rule add fwmark 1 table 200 #now add routes here for routing certain marks to loopback device