Hi,netfilter, Thanks Joerg help. i wrote: If I used ebtables process a package,but need iptables can't process THIS package,how can I do? this means: if i use ebtalbes(http://ebtables.sourceforge.net) manage a package(like a ftp-package),for example: set-mark. for this package (ftp-package),not need iptables manage this package,how do i do?