Hello, I do NOT want to type: (but it works correctly) [1] iptables -A INPUT -m state --state NEW,INVALID,RELATED,ESTABLISHED,UNTRACKED,... -j A_TARGET_WHICH_REQUIRES_CONNTRACK I just want to have: [2] iptables -A INPUT -j A_TARGET_WHICH_REQUIRES_CONNTRACK But [2] does not work, it fails because conntrack does not work: invalid conntrack, here: ct = ip_conntrack_get((struct sk_buff *)skb, &ctinfo); if (!ct) { DEBUGP("invalid conntrack \n"); return; } Can someone please explain why? What I do wrong? Machen Sie aus 14 Cent spielend bis zu 100 Euro! Die neue Gaming-Area von Arcor - über 50 Onlinespiele im Angebot. http://www.arcor.de/rd/emf-gaming-1