Firstly, thnks to Rob Sterenborg for his help. I've just visited the patch-o-matic section from the netfilter web site and I saw this: Author: Emmanuel Roger <winfield@xxxxxxxxxxxx> Status: Working, not with kernel 2.4.9 This patch adds CONFIG_IP_NF_MATCH_STRING which allows you to match a string in a whole packet. THIS PATCH DOES NOT WORK WITH KERNEL 2.4.9 !!! I have Red Hat 9 / Kernel 2.4.20-8 / iptables 1.2.7a...I ask you: can I use this patch package in order to use the libipt_string module ??? Or do I have to upgrade my kernel at first ??? Where can I get this patch because I suppose it doesn't come with the whole patch-o-matic ??? I'm not an expert, so I'm sorry to disturb you. Greetings, Alejandro from Argentina