I have downloaded the version of patch-o-matic-ng from netfilter websites and now my patch of string controlling is working, below command is the proof of that #iptables -A FORWARD -m string --algo bm --string "hello" -j DROP ok that is fine. is there any way to alter that packet. to replace--string is there any patch available, if yes so how i can implement that patch. I am using kernel 2.6.14.4 and latest patch-o-matic-ng from svn repository of netfilter website. i am using RedHat Enterprise Linux version#4(ES). this is the websites http://www.cipherdyne.org/fwsnort/ here iptables are providing --replace-string it is not working fine giving errors to me. I am waiting for quick response. Regards noman __________________________________ Yahoo! for Good - Make a difference this year. http://brand.yahoo.com/cybergivingweek2005/