> So, could it be that you are loading it in the wrong chain (not supported by the module) ? Indeed.... I missed the big capital letter words in the man page that <owner> is only usable in OUTPUT chain. For the <connlimit> extension the kernel module isn't compiled in for FC2. Thanks all for helping out. Regards, DL __________________________________ TSUKAME EIKOU! KAGAYAKE EGAO! Yahoo! JAPAN JPC OFFICIAL INTERNET PORTAL SITE http://pr.mail.yahoo.co.jp/para/