On Sunday 2011-06-12 19:36, Sergei Zhirikov wrote: > Hi, > > If I try to use > > -m state ! --state NEW > > as a part of the iptables command line I get this error message: > > iptables v1.4.11.1: state: option "--state" cannot be inverted. > > It worked fine with iptables 1.4.10. I'm wondering if this an intended change > or one more in the series of similar bugs introduced in 1.4.11? Similar oversight, unfortunately. But you can use -m conntrack instead which does not have the issue. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html