Hi, Is there any specific order in which match will take place ? Ex:- lets say I have a following rules. 1.) iptables -I PREROUTING -t mangle -m state --state NEW -m mark --mark 1 -j ACCEPT 2.) iptables -I PREROUTING -t mangle -m mark --mark 1 -m state --state NEW -j ACCEPT When packet traverse first rule, does state match comes before mark match ? When packet traverse second rule, does mark match comes before state match ? Rgds, Nishit Shah. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html