> > which kernel are you running Florian? > > 5.10.5 stable. I can check Fedora tomorrow, I don't have classic > iptables there at the moment. > NM Florian, My code was returning -1 on a callback function, disabling the polling for the netlink socket file descriptor. I had it fixed: TCPv6 [ 0] src = fe80::5054:ff:fecc:767d (port=1024) to dst = fe80::5054:ff:fecc:767d (port=22) (confirmed) table: raw, chain: PREROUTING, type: rule, position: 1 and it is working fine now. Thanks a lot for your support today, checking things for me, really appreciate! Best, -rafaeldtinoco