On Wednesday, August 31, 2011 09:18:26 AM Always Learning wrote: > A very helpful and knowledgeable poster, Walter Haidinger, in his email > dated Wed, 31 Aug 2011 13:10:16 +0200 (12:10 BST), gave what appears to > be an ideal solution. > * get a more recent iptables from netfilter.org It's less than ideal to install anything from source, as Karanbir has so correctly pointed out downthread. Sometimes it is necessary; but it is never ideal, for the reasons KB stated.