Hi! I'd like put the first n packets of a connection into a seperate class like having a burst for each connection. The netfilter nth patch doesn't quite do this as it a. only matches a single packet count and b. works on the rule instead the connection count. I'm thinking of something like: iptables -t mangle -I foo -m nth --every :100 -j ... where the counter is reset for every new connection. Can this be done with filters? Any hints are appreciated! Thanks, Walter _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/