> may be the problem is you don't try to use -i option, since you are using > INPUT chain right, > try to use it with that option Thanks, but it didn't work. However, I withdraw the question, because (continued below) > >CONFIG_IP_NF_CONNTRACK=y > >CONFIG_IP_NF_FTP=y > >CONFIG_IP_NF_IPTABLES=y > >CONFIG_IP_NF_FILTER=y [snip] > >is unrecognized. Why is this? Is there another kernel options that I > >should have included? Actually I missed at least two necessary kernel options. I don't know how I missed them. I'm having disk problems and can't compile right now, but let's assume the problem is solved. Because of the disk problems my incoming mail is also down, so thanks to anyone else who sent solutions that didn't get through yet. David