In article <003001c0c63e$fdc9b2a0$6a38f981@ksp.fujixerox.co.jp> you wrote: > but I don't know whether it can fulfill the functions of so-called > Stateful Inspecton firewall. iptable has a contrack module which supporets statefull filtering. It does not support expection out of the box. Statful Inspection is often a missused marketing phrase from Checkpoint. Greetings Bernd - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org