On Wed, October 4, 2006 10:03, G�sp�r Lajos wrote: > Hi, > > > Is there a bug in 2.6.18 kernel? > I am using it with iptables v1.2.11 and the following command gives me > error: > > > fw1:~# iptables -A INPUT -j DROP -p tcp -m string --string "test" > iptables: Invalid argument > > > fw1:~# iptables -v -A INPUT -j DROP -p tcp -m string --string "test" > DROP tcp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 STRING match "test" > iptables: Invalid argument > > > fw1:~# uname -a > Linux fw1 2.6.18.06.275.16 #1 SMP Mon Oct 2 16:29:40 CEST 2006 i686 > GNU/Linux > > > fw1:~# iptables -V > iptables v1.2.11 > > Any comments? Yeah. - You probably don't have the string module installed and/or loaded. - Kernel 2.6.18 is rather new (sep-2006) and iptables 1.2.11 is rather old (june 2004). Upgrade to a new iptables version: 1.3.6 is just released. Grts, Rob