Hello Luciano, Try helper patch from patch-o-matic or use last kernel. I see it in 2.4.20pre4 If you want to match all packets belonging to ftp-sessions: (both ftp-command and ftp-data connections) iptables -t nat -A PREROUTING -m helper --helper ftp -j MARK --set-mark 1 use irc for irc-sessions. You'll also need the bidirectional irc match for irc matching to work properly. ----------------------------------- mailto:alexey_talikov@texlab.com.uz BR Alexey Talikov FORTEK ----------------------------------- _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/