psd match is too greedy with options, and doesn't play well with other matches. For example: # iptables -A INPUT -m psd -m recent --set -j DROP iptables v1.2.11: missing optarg Try `iptables -h' or 'iptables --help' for more information. Below patch makes it less greedy. This fixes bugzilla #18 Phil