On 12 May 2015 at 22:50, Daniel Haryo Sugondo <sugondo@hlrs.de> wrote: > > I think, we need a newer kernel to get "flush ruleset" work. > That's true :-) you need at least 3.18 (4.0.2 in unstable right now) -- Arturo Borrero González