Hi, What is purpose of NF_REPEAT verdict? In case if it is used in userspace it causes infinite loop (of course; but I see no use for it in this case). What about something like NF_CONTINUE (i.e. packet is not accepted nor dropped)? /Al