Hi, I have just spotted if (BASE_CHAIN && (natinfo->target | ~EBT_VERDICT_BITS) == EBT_RETURN) in ebtables's ebt_nat.c (there may be other places), I think this should be & ~EBT_VERDICT_BITS instead, should not it? -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html