I have written a netfilter match called domain. Such as: iptables -A OUTPUT -m domain --domain ".google.com" -j DROP Then it will drop the dns query which domain like "www.google.com,news.google.com,mail.google.com,..." iptables -I OUTPUT -m domain --domain "map.google.com" -j ACCEPT Then it will accept the dns query which domain is "map.google.com". I known this match is trival,but I want to know how to submit this patch. Thanks for any response. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html