Hello Joerg, On Thursday 09 January 2003 06:14, Jackfritt wrote: > Ok I have the following problem. > iptables -A OUTPUT -o ppp0 -p tcp -m length --length :40 -j MARK --set-mark 10 > That should mark all ACK's or not ? > When I try to do this I get the error: > iptables: Invalid argument > [...] > So now my question is what am I doin wrong ? Typically when the only error message from iptables is 'Invalid Argument', the actual error message would be most of the time in the kernel log. i.e. If I run your command above, it tells me # dmesg MARK: can only be called from "mangle" table, not "filter" So, you should be using a -t mangle in front.. Have a nice day, Fabrice. -- Fabrice MARIE "Silly hacker, root is for administrators" -Unknown