Hi all, I thought it would be possible to execute a script using iptables, but according to the relevant man pages, this is not the case. I still hope someone on this list can help me. Basically, I need to catch ICMP unreachable and/or TCP connection (attempts) that are timing out and execute a script when either condition is met. This does sound trivial if one knows where to look, but I simply can't find a way to do so. The actual goal is to escalate this condition to a custom user-space process which can set up overlay routing. Any and all help appreciated, Richard -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html