IPtables, QUEUE target and connection-tracking...

[dir@xxxxxxx]

Any pointers on how connection-tracking interacts (or doesn't !) with queuing 
up to userland?

I would like to queue up de-fragged ICMP, UDP and TCP messages up to userland 
so that I can render a verdict on them.

Is this possible/plausible given a 2.4.20 kernel (RH9)?

Thanks, dir