> do you mean iptalbes can work without netfilter? or I can use No. iptables is the userspace utility to set rules for netfilter. > connlimit function just only with a libipt_connlimit.so file? > then how to do it. I try to use modprobe to load the library, > but it said to me that no such module could be found. to load > a .so fromat module need a diffrent way? The .so is not a kernel module but a shared object. You don't load shared objects yourself. Gr, Rob