On Wednesday 20 January 2010 16:23:53 Mart Frauenlob wrote: > -t filter ... -m state --state INVALID ... -j DROP > That's it, you nailed that one. Sorry, that we missed it, maybe we have just too many well written/behaving programs ;) Cheers Carsten -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html