> How add ipt_string in version 1.2.7a. I did read FAQ, but not found. In > version 1.2.5, I used patch-o-matic. Well, you need to execute # ./runme extra from the patch-o-matic directory, and apply the string match patch to the kernel, then build it as a module, so it is faster to build just a module, than the whole kernel tree. Then recompile iptables, make install. And try it out: # iptables -m string --help Regards, Maciej Soltysiak