Hi, How would I go about making unicast replies to broadcast queries automatically accepted by the connection tracking code? i.e. linux machine ip 192.168.1.1 QUERY: UDP 192.168.1.1:1024 -> 192.168.255.255:137 [broadcast] (should allow responses from 192.168.*.* (I'm assuming the network interfaces have an 192.168.n.m/16 broacast 192.168.255.255 address) to 192.168.1.1:137) RESPONSE: UDP 192.168.5.6:137 -> 192.168.1.1:1024 [unicast] should be considered RELATED by the connection tracking code. Currently I have to let everything in from localnet udp port 137 to udp ports 1024-4999 which kind of sucks... This is an issue with samba broadcasts (nmblookup uses udp port 137, etc.) Cheers, MaZe. - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html