On Wed, 16 Apr 2003, Isabelle Labbe wrote: > Can anyone confirm that the DSCP target works in iptables 1.2.8 (or > 1.2.7a) ? Works for me with iptables 1.2.7a from netfilter.org. I tested the command you mentioned and it worked. I am running Debian unstable, but that doesn't matter. I think the iptables capabilities depend on a) The kernel configuration. Check out the CONFIG_IP_NF_* options in the kernel configuration file and reconfigure/recompile the kernel source code if needed. A quick look at the content of the kernel netfilter directory may also help: ls /lib/modules/KERNEL_VER/kernel/net/ipv4/netfilter/ DSCP match kernel module name: ipt_dscp.o DSCP target kernel module name: ipt_DSCP.o b) The availability of iptables shared object modules. Check out ls /usr/{,local/}lib/iptables/ DSCP match userspace module name: libipt_dscp.so DSCP target userspace module name: libipt_DSCP.so -- Ilguiz Latypov Net Integration Technologies, Inc tel. +1 (514) 281 9191 x 117