> > However I agree with you that netfilter is easier to use and has more > > capabilities, I still can't beleive that netfilter (iptables actually) > > doesn't have a way to identify rules uniquely (via an ID). So simple > > feaure, so powerfull, and still iptables doesn't have this. > > > > And no, linenumbers don't identify rules uniquely, they can change at > > any moment. > > check out the comment patch from POM. Ohh, and its in kernel-2.6.9 by default... I'm happy again. -- damjan | ÐÐÐÑÐÐ This is my jabber ID --> damjan@xxxxxxxxxxxx <-- not my mail address!!!