On Thu, 2011-10-06 at 22:59 +0200, Jan Engelhardt wrote: > On Thursday 2011-10-06 22:55, Andrew Beverley wrote: > > >Hi, > > > >Does the order of match extensions matter for iptables rules? > > Clearly. Okay... so why does this rule appear to not match anything? iptables -t mangle -A FORWARD -i eth0 -m state --state NEW \ -m statistic --mode nth --every 1 -m mark ! --mark 99 -j LOG Is the importance of the order documented anywhere? Thanks, Andy -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html