On Mon, 2002-11-25 at 11:44, Tomasz Wrona wrote: > Hi, > > How do You think, is it valid to use such a match case ? > > -m helper --helper pptp > -m helper --helper h323 > > Personaly I used it but I have never seen if this rules had counted > anything. -m helper --helper pptp That should work given you have the ip_conntrack_pptp module loaded (or compiled into your kernel) -m helper --helper h323 That will _not_ work. h323 is just the name of a collection of other protocols that run inside each other. The primary controlchannel can be matched with H.225 and the data-channels can be matched with H.245 (case-sensitive!) -- /Martin Never argue with an idiot. They drag you down to their level, then beat you with experience.