Hi, > Does this men that it won't work with NEWER kernels than 2.4.9? If so, > is there a replacement. It works with everything after 2.4.9. (and with 2.4.9 with my patch available at http://soltysiak.com/linux/string-compilation-249issue.patch - it's a patch against the netfilter tree so apply this before using patch-o-matic) > iptables v1.2.7a: Couldn't load match > `string':/lib/iptables/libipt_string.so: cannot open shared object file: > No such file or directory You have to recompile iptables and its modules to install the shared library for the string match. Do a make install again on the iptables source. Please also read the entry in FAQ about stopping worms, virii, etc. It mentions the string match should not be used for that. Regards, Maciej