Jason Opperisano wrote: > > is it possible that a rule above your "-m string --string $STRING" is matching the data packets of the connection; i.e, a "-m state --state ESTABLISHED -j ACCEPT" rule? > > -j | No. That V "I" down there says not. > iptables -I INPUT -m string --string $STRING -j LOG ^ | Gypsy