Shorewall policy
Before Shorewall-generated 'MARK' rules 11000-11999 After 'MARK' rules but before Shorewall-generated rules for ISP interfaces. 26000-26999 After ISP interface rules but before 'default' rule. Examples. Example 1: You want all traffic coming in on eth1 to be routed to the ISP1 provider.