Hi Fulvio,
While staring at the mangle tables thinking how to address the issue of route persistence for HTTP/S sessions I noticed the following:
1. The NetBalance chain is referenced in three chains: PREROUTING, INPUT and OUTPUT. I don’t believe that the reference in the INPUT chain is required and could be safely removed.
2. The NB_STAT chain is only referenced in the POSTROUTING chain so it is missing out on counting traffic that is terminated on the Zeroshell box itself. Perhaps it should also be referenced/called in the INPUT chain.
If you like I could come up with a patch to make those changes.