Well, to be completely fair, I didn't use '-c' for my save command. Simply 'iptables-save > file'. Bob McDowell Network/Security Engineer Cox HealthPlans 417.269.2848 bmcdowell@xxxxxxxxxxxxxxxxxx Confidentiality Notice: This e-mail message (including any attachments) may contain confidential and privileged information, and is for the sole use of the intended recipient(s). Any unauthorized review, use, disclosure or distribution is strictly prohibited. If you are not the intended recipient, please notify the sender by replying to this e-mail message, permanently deleting the original message and destroying any hard copies of the original message that may have been created. -----Original Message----- From: Jan Engelhardt [mailto:jengelh@xxxxxxxxxx] Sent: Tuesday, June 07, 2011 4:02 AM To: Bob McDowell Cc: john.lister@xxxxxxxxxxxxx; netfilter@xxxxxxxxxxxxxxx Subject: RE: [2:656]? On Monday 2011-06-06 21:59, bmcdowell@xxxxxxxxxxxxxxxxxx wrote: >> ----- >> *filter >> :INPUT DROP [2:656] >> ----- >Well, that explains why I couldn't search for it! HA! Well, it is documented right in iptables-save(8) under -c. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html