Hi there, The subject said it all, I was allocating memory for a checkentry()/destroy() refcount but not freeing it.. Current code can be retreived from : svn co http://svn.cookinglinux.org/netfilter/geoip/trunk Bug discovered with nfsim, the netfilter developer's favorite toy. See ya, --peejix