Hi all, since I use bittorrent (Azureus), I notice messages like: SFW2-OUT-ERROR IN= OUT=eth0 SRC=192.168.2.1 DST=24.11.118.xxx LEN=52 \ TOS=0x00 PREC=0x00 TTL=64 ID=42054 DF PROTO=TCP SPT=6286 DPT=6881 \ WINDOW=1460 RES=0x00 ACK FIN URGP=0 OPT (0101080A01570F3F004EEC99) and SFW2-INext-DROP-DEFLT-INV IN=eth0 OUT= \ MAC=00:01:02:05:4e:5f:00:a0:c5:34:83:4f:08:00 SRC=24.11.118.xxx \ DST=192.168.2.1 LEN=52 TOS=0x00 PREC =0x00 TTL=107 ID=28663 \ DF PROTO=TCP SPT=6881 DPT=7491 WINDOW=65535 RES=0x00 ACK URGP=0 \ OPT (0101080A004FF4FE01BC8854) (the DST and SRC address 24.11.118.xx happen to be the same in this example, but I see errors for other addresses aswell). There are about 1 or 2 OUT-ERROR messages a minute, and maybe 1 DROP-DEFLT-INV message every 5 minutes, so (considering the number of packets going in and out) not really a whole lot. Are these "just" junk packets from other (broken) BT clients or is it possible that there's something broken on my side? I can see why the packetfilter would refuse invalid packets from the outside btw, but it escapes me why iptables would deem packets coming from the inside as invalid or erroneous. Theo -- Theo v. Werkhoven Registered Linux user# 99872 http://counter.li.org ICBM 52 13 27N , 4 29 45E. + ICQ: 277217131 SUSE 9.2 + Jabber: gurp@nedlinux.nl Kernel 2.6.8 + MSN: twe-msn@ferrets4me.xs4all.nl See headers for PGP/GPG info. +