Michele, : I have to use kernel 2.2.25, with ipchains but need the --set-mark : facility of iptables. ipchains has a similar feature. It's not a target as in iptables. : Is there a way to mark incoming packet ? ipchains -I input -s $SOURCE -d $DEST --mark $MARK -j ACCEPT -Martin -- Martin A. Brown --- SecurePipe, Inc. --- mabrown@xxxxxxxxxxxxxx