[Oops, sorry there for incomplete mail :)] Hi, > I think to something like that: > iptables -t mangle -A INPUT -j TCPFLAG --set-flags FIN,URG There is no such module. It would be possible to do that. If a module like this existed it would be a great way to violate the protocol and cause antisocial behaviour of your tcp stack. Anyway such a module is not difficult to write. So it is possible, but nor the iptables package and the kernel, nor patch-o-matic do not contain such a module. Regards, Maciej