Using iptables 1.4.0rc1(svn7083), iptables seems to have problems autoloading TCPMSS: 18:53 ichi:/ws/iptables # strace -e open ./iptables -t mangle -A OUTPUT -d 1.3.3.7 -p tcp --syn -j TCPMSS --clamp-mss-to-pmtu open("/ws/iptables/extensions/libxt_tcp.so", O_RDONLY) = 3 open("/ws/iptables/extensions/libxt_TCPMSS.so", O_RDONLY) = 3 iptables: No chain/target/match by that name 18:53 ichi:/ws/iptables # modinfo xt_TCPMSS filename: /lib/modules/2.6.23.1-900.ccj58-regular/kernel/net/netfilter/xt_TCPMSS.ko alias: ip6t_TCPMSS alias: ipt_TCPMSS description: x_tables TCP MSS modification module author: Marc Boucher <marc@xxxxxxx> license: GPL srcversion: F9280CB30B14724A70F943F depends: x_tables vermagic: 2.6.23.1-900.ccj58-regular SMP mod_unload 586 The aliases are there (a common source of errors is lacking these aliases). If I manually `modprobe xt_TCPMSS`, iptables succeeds. Any idea? - To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html