On Tue, 2003-12-23 at 06:47, ads nat wrote: > Hi, > I am trying to setup IPTABLES rules. I am newbe to > this. > > One of the rule in filter table is > ####### > -A INPUT -p tcp ! --syn -m state --state NEW -j LOG > --log-prefix "New not syn:" Try: iptables -A INPUT -p tcp ! --tcp-flags SYN SYN -m state --state NEW -j LOG --log-prefix " New not syn: " Note the change in specifying flags from ipchains to iptables. Also note I added spaces around your prefix. This will make it easier to read in the logs. HTH, C