Hi, This patch applies to last Harald's patch bombing. It's based on Martin's idea of removing negative values in conntrack protocol helper functions. Please see: http://lists.netfilter.org/pipermail/netfilter-devel/2004-June/015769.html Now functions packet and error return CONNTRACK_CONT to let the packet continue its travel through the conntrack system. It also add a macro to increase vars used for stats. regards, Pablo