I don't think you can perform CONNMARK on the INPUT chain of the filter table, try doing it on the mangle table :- /usr/local/sbin/iptables -t mangle -A INPUT -j CONNMARK --save-mark Cheers. ----- Original Message ----- From: "Justin Schoeman" <justin@xxxxxxxxxxxxxxx> To: <netfilter@xxxxxxxxxxxxxxxxxxx> Sent: Friday, August 11, 2006 1:34 AM Subject: Unknown error. > Hi again. > > I was wondering if anybody could help me. I am using kernel 2.6.17.8 > with iptables 1.3.5, and I get the following error: > > iptables: Unknown error 4294967295 > > for this command: > > /usr/local/sbin/iptables -A INPUT -j CONNMARK --save-mark > > I see a large number of hits for the error message on google, mainly > related to iptables 1.3.5, but I have not seen one thread with a > conclusive solution. > > Could anybody please give me some pointers on where to start looking? Is > this an iptables bug, if so, what is the last good version. If not, > what else can I look for? > > Thanks, > > Justin >