>that's the classic symptom of kernel & userspace being out of sync. >i.e. your kernel has patches applied to it that your userspace iptables >command is not aware of. OK. I'm a noob, and that's useful info., tough I wish I hadn't gotten to that point in the first place :-) Question: if I uninstall the current version, and role back to the previous version, which worked just fine, should I be OK? There have been a number of kernel updates since I first installed it from rpm. >when you apply patches from PoM, make sure you specify KERNEL_DIR and >IPTABLES_DIR and that you then compile the iptables userspace against >that kernel source tree. > >the error indicates that the conntrack structures of the iptables binary >and the kernel are different sizes. Thanks for this. Since I've never used PoM, I'll rtfm and any how-to's (suggestions?) before moving forward. Are there any tips/tricks/gotchas you can suggest? Many thanks! Dimitri