Why would there be no chain/target for iptables -t raw -A PREROUTING -j CT? It's almost like the CT or NOTRACK targets aren't built into the kernel, how do I list what targets are supported? Thanks, Sam This doesn't work: root@x86-gaia:~# iptables -t raw -A PREROUTING -j NOTRACK iptables: No chain/target/match by that name. root@x86-gaia:~# iptables -t raw -A PREROUTING -j CT --notrack iptables: No chain/target/match by that name. But this does: root@x86-gaia:~# iptables -t raw -A PREROUTING -j ACCEPT My versions are: Linux x86-gaia 2.6.39.1 #1 SMP Thu Jun 9 15:49:16 PDT 2011 i686 unknown iptables v1.4.10 -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html