Am I right in thinking that the stateful capabilities of iptables (NEW/ESTABLISHED/RELATED etc) only apply to tcp connections? If not, how are these states defined for udp? iptables doesnt complain if I add a rule containing '-p udp -m state --state NEW' Thanks, Terry.