Hello, on my 2.5.19 system some ICMP Port Unreachables get marked as unclean: ipt_unclean: (embedded packet) UDP len too long 56 vs 76 IN=eth0 OUT= MAC=00:e0:7d:92:1f:0b:00:e0:7d:92:1f:0a:08:00 SRC=x.x.x.x DST=10.0.0.3 LEN=124 TOS=0x00 PREC=0x00 TTL=54 ID=14844 PROTO=ICMP TYPE=3 CODE=3 [SRC=10.0.0.3 DST=x.x.x.x LEN=76 TOS=0x00 PREC=0x00 TTL=57 ID=0 DF PROTO=UDP SPT=123 DPT=123 LEN=56 ] if I understand this right, it means that the embedded (original) UDP Packet was a NTP Packet with 76 bytes, and that unclean thought it need to be 56 bytes long. I am confused about the double LEN= entries in the embedded log above. - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html