Hi, On Thu, Mar 25, 2004 at 04:07:56PM +0100, Sebastian wrote: > Dmesg say's: > CONNMARK: targinfosize 8 != 12 > > Kernel is 2.4.25 with pom snapshot 20040319. > Iptables is debian package 1.2.9-6: > # iptables --version > iptables v1.2.9 > > Any suggestions what i can do to get the CONNMARK target working? This is because iptables 1.2.9 is incompatible with the newest CONNMARK kernel code. You should try the iptables CVS (or at least get the CONNMARK-related files from the CVS). This was needed because there were useful feature add-ons to CONNMARK. Now you can use a bitmask when setting/copying the connmark value. -- KOVACS Krisztian