> iptables -A INPUT -p tcp --syn --dport http -j USER_CHAIN > iptables v1.2.7a: Couldn't load target > `USER_CHAIN':/usr/local/lib/iptables/libipt_USER_CHAIN.so: > cannot open shared object file: No such file or directory > why? As the name implies, USER_CHAIN is a user defined chain which is not available if you didn't define it. iptables -N USER_CHAIN iptables -A USER_CHAIN -j REJECT (or something more useful) Might help. There is a nice iptables tutorial which explains a whole lot at : http://iptables-tutorial.frozentux.net Rob
