looks for me like my conntrack_delete problem - no nice example within the man page. order, arrangement is important > iptables -A INPUT -d 192.168.52.10 -m string --string "GET" --algo bm -m string --string "passwd" -algo bm -j DROP > try this: iptables -A INPUT -i eth0 -p tcp -d 192.168.52.10 -m string --string "PROPFIND" --algo bm -m string --string "passwd" --algo bm -j DROP
