So I'm not sure how I managed to do this, but here it is: sudo iptables -A FORWARD -s 10.0.0.0/8 -m string --string "myspace.com" --algo bm -j DROP iptables: match `string' v1.3.6 (I'm v1.3.8). I'm running kernel 2.6.21.7. Is there something I'm missing to get this to fly? Thanks all. James - To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html