hi, i use: -RedHat8.0 -kernel-2.4.18-26.8.0 -libnet1.0.2a -iptables-1.2.7a -snort-inline1.9.1-2 > No option, just reference them directly. You can use any of > the three interface names, IE eth0,eth1,br0 in your rules. what do you mean with reference directly > In the 2.4 patch you can just use -i and -o, for the 2.5 > standard kernel, you need to use the ipt_physdev module (the kernel module is in > the standard 2.5 kernel, the userspace module is in the iptables CVS (standard make is > enough)). what should i do? in my iptables script i use -i eth0 in my log the packet dropped because (IN=br0 PHYSIN=eth0) IN doesn´t match thx for help jo