Hello, Alex Flex a écrit : > > I also tried adding one more rule iptables -t raw -A INPUT -p tcp > --sport 22 -j NOTRACK but i get > iptables: No chain/target/match by that name. Please read the iptables man page about the raw table : It provides the following built-in chains: PREROUTING (for packets arriving via any network interface) OUTPUT (for packets generated by local processes) Also, you want to match incoming packets with destination port 22, not source. So : iptables -t raw -A PREROUTING -p tcp --dport 22 -j NOTRACK -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html