On Tue, May 11, 2004 at 09:46:46AM -0700, Mike Mestnik wrote: > I guess what I was asking is do you NEED the --state NEW to use the other > states, like in BSD? Yes. The NEW is how the initial connections actually get into the conntrack table. The ESTABLISHED,RELATED just match already existing connections, and relies on the connection table already being populated. Doug