On Fri, Jan 03, 2014 at 01:19:08PM +0000, Patrick McHardy wrote: > I guess you need to put the SYNPROXY rule in FORWARD instead of INPUT. Though having a manpage for this newly added extension would likely be helpful. Phil -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html