Is there a problem with mss in this release? If I specify rule: -A OUTPUT -p tcp --tcp-flags SYN,RST SYN -m tcpmss --mss 1000:1500 -j ACCEPT I get error: Invalid mss '1000' specified. It appears that mss values less than 65536 are rejected, while values of 65536 or greater are accepted. Is this not the wrong way around? Regards Steven. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html