Hi, This is a trivial fix. There are wrong chunk_type values in sctp table. The chunk_type of ASCONF and ASCNF_ACK must be 193 and 128, respectively. Please check it. Regards, Naohiro
--- iptables--20080227/extensions/libxt_sctp.c.orig 2008-01-29 22:48:05.000000000 +0900 +++ iptables--20080227/extensions/libxt_sctp.c 2008-02-29 14:43:39.000000000 +0900 @@ -125,8 +125,8 @@ static const struct sctp_chunk_names sct { .name = "ECN_ECNE", .chunk_type = 12, .valid_flags = "--------"}, { .name = "ECN_CWR", .chunk_type = 13, .valid_flags = "--------"}, { .name = "SHUTDOWN_COMPLETE", .chunk_type = 14, .valid_flags = "-------T"}, - { .name = "ASCONF", .chunk_type = 31, .valid_flags = "--------"}, - { .name = "ASCONF_ACK", .chunk_type = 30, .valid_flags = "--------"}, + { .name = "ASCONF", .chunk_type = 193, .valid_flags = "--------"}, + { .name = "ASCONF_ACK", .chunk_type = 128, .valid_flags = "--------"}, }; static void