Hello, Does anyone knows why CONFIG_IP_NF_MATCH_OWNER is missing in 2.4.28 and later kernels? Its used for matching owners of packets ... I noticed this when the following rule wasn't recognizing in one of my 2.4.29 kernel ... iptables -I OUTPUT -p tcp --dport 22 -m owner ! --uid-owner root -j DROP If we manually add the entry in .config and compile the kernel. it will work fine ... :-/ /binish/ Get Thunderbird <http://www.mozilla.org/products/thunderbird/>