Mangles!!!!!!

hey guys, im really frustrated with the way mikrotik work on connection marking its sooooo illogical !!! or at least seems that way, any help is more than welcomed!

i try mangling a connection that comes in from a specific interface with a source address from an IP list, but than i realize either some connections were not marked even though they shouldve been and were marked by the next mangle rule down the list, or even funnier than that a connection was marked that came in from a whole other interface!!! WTF???!!!
it should be mentioned that these mangles were applied in the pre-routing stage, which considering Mikrotiks official Packet flow diagram (http://wiki.mikrotik.com/wiki/Manual:Packet_Flow_v6) just Dst-Nat has not been applied (since i dont do any src NATing on thatinterface) and connection Tracking has already been done.

What is the logic behind Mikrotiks connections and connection Tracking ???

It’s pretty much standard Linux firewalling.

Maybe give us a specific config example, currently it is hard to understand the confusion