> Could someone explain the tcp-flag options > > > like the following line what does it mean ? > tcp-flags SYN,RST SYN,RST > > why between RST and SYN there is no comma? > tcp-flags x,y,z x,y examines flags x, y and z and matches if x and y are set and z is unset. man 8 iptables for more info. -- Eray