From: Yasuyuki KOZAKAI <yasuyuki.kozakai@xxxxxxxxxxxxx> Date: Tue, 14 Feb 2006 13:03:15 +0900 (JST) > looks fine to me. I tested with recent kernel, same kernrel config, > and same rules, but couldn't reproduce above log. > > Which version of kernel(or git commit id) and ip6tables ? > And could you do > echo 255 > /proc/sys/net/ipv4/netfilter/ip_conntrack_log_invalid Sorry, right sysctl is echo 255 > /proc/sys/net/netfilter/nf_conntrack_log_invalid -- Yasuyuki Kozakai