On 03/01/2006 12:55 PM, Tommy W wrote: > # iptables -A PREROUTING -t mangle -i eth4 -j CONNMARK --restore-mark > iptables: No chain/target/match by that name > > What's missing ? > I do HAVE the module libipt_CONNMARK.so It looks like your userspace iptables supports it, but it is not enabled in your kernel. Note that /usr/local/lib/iptables/libipt_CONNMARK.so is not a kernel module.