Friends: In Linux implementation of the TCP checksum the functions using the checksum of the skbuff. Theoretically the TCP pseudo header only contains the both IP directions, the protocol (6), 1 byte reserved full of zeros and the segment length. So, in what form is used the skbuff checksum in this computation?. I suppose that the TCP level is not concern about netfilter modules. It's transparent. I mean, if I change the packet content in out direction and restore it in direction this change should be invisible to the uppers levels - including TCP level. Thanks -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html