R1 - iptables -A INPUT -j NFQUEUE R2 - iptables -A INPUT -p tcp -j DROP . Using R1 , queue pkt to user space . If we set verdict of the packet as NF_ACCEPT from user space , the packet wont execute R2 . But , the funny thing is , if we wont set any verdict . i can see R2 is getting executed . My question is : - > the packet that executes R2 is same packet , tat is copied to userspace .????? Thanks, Ratheesh -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html