> > I run a debian box with the kernel/iptables version as per the subject, I > have also applied P-O-M patch pptp-conntrack-nat and re-compiled > succesfully. > > Just wondering if anyone knows why, when I try and execute the > following, I > get an invalid argument from iptables. > > IPTABLES -t nat -A POSTROUTING -o eth0 -j SNAT --to-source 202.0.35.* > (inet_ip) > > is this in incompatability thing, i.e. i need to upgrade iptables > to 1.2.7a It's an incompatability thing. The patch modifies some kernel structures, and your iptables version is out of date. I'm not familiar with iptables 1.2.7a, but 1.2.8 worked fine for me. You can pull it off www.netfilter.org