Hi, Please, excuse me this newbie question, but I don't understand correctly. For what I know, UDP connections are not statefull, so I can't track them... right? What I've been doing on my firewalls was explicitely accepting incoming packets from UDP privileged ports and so accepting answers to my UDP requests. Now I have found that if I accept RELATED,ESTABLISHED traffic without saying anything about the protocol, UDP answers will be accepted. I know that this isn't a question related to Netfilter but is the only place I know to ask about this. thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html