On Fri, Feb 18, 2005 at 09:16:21PM +0000, Marco wrote: > cat /proc/net/ip_tables_matches | grep state doesn't return anything but > the contents of ip_tables_matches are: > > tcp > udp > icmp it sounds an awful lot like you compiled your kernel without: CONFIG_IP_NF_MATCH_STATE=y and you would obviously also need: CONFIG_IP_NF_CONNTRACK=y in there as well... -j -- "When will I learn? The answer to life's problems aren't at the bottom of a bottle, they're on TV!" --The Simpsons