On Tuesday 23 December 2003 3:30 pm, ads nat wrote: > Ya, > Following worked from command line : > ####### > iptables -A INPUT -p tcp ! --tcp-flags SYN SYN -m > state --state NEW -j LOG --log-prefix " New not syn: " > > ####### > > > Does this means that I should enter all rules from > command line. If you are using iptables-save and iptables-restore, then yes, you should enter all your rules at the command line, then use iptables-save to keep them for restoring later. The alternative way to preserve your rules is to write them into a script which gets executed on bootup (or whenever). Either is good - different people use each. Antony. -- It is also possible that putting the birds in a laboratory setting inadvertently renders them relatively incompetent. - Daniel C Dennet Please reply to the list; please don't CC me.