> iptables -A FORWARD -p tcp -m state --state NEW -m string --string > > Have you what compile the module string ? Take a look at patch-o-matic, patch your kernel, compile the module, compile iptables sources to get the userspace module. Use the rules. Regards, Maciej