I read about ULOG and NFQUEUE in the man page, and there is something I don't understand, and that is, why is NFQUEUE needed. If I understand this correctly, a ULOG target with no prefix, that sends the entire packet to userland, and is followed by an equivalent DROP rule, does the same thing as NFQUEUE. Doesn't it ? I admit that I am no big expert on nfnetlink_queue. Could I be missing something there ? - To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html