Hello, I have a application that is handling packets received from iptables via the QUEUE target. The user space programme does it's stuff, then accepts the packets. All is working fine, however in the event of a error (the user space programme dies for some reason), is there any way of telling iptables to no longer try to pass packets onto the QUEUE target ?, i.e. some sort of libipq flag to automatically accept all packets if it thinks the peer has died. Currently the only options I can think of are a signal handler that manipulate the iptables rules (not good), or a wrapper script around the user space programme to monitor it and remove the rule if it dies. Any other options ? This is with a 2.4 kernel btw. Thanks, Richard.