Are the interfaces saved in any way in a session or is it only ip src, dst and ports that are saved and matched against? Why I ask is because what happens if I configure a linuxbox as two virtual firewall with same nets being used on different vlans. Will all the sessions be separate or will they sometimes "merge" if it happens to be the same IPs and ports in two sessions. /Oscar - To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html