Debian BTS report: http://bugs.debian.org/117590 http://bugs.debian.org/iptables
Another Debian developer confirmed the tcp flags (--syn) not saved problem using iptables 1.2.6a. Please reply to Tuomas Heino <iheinoATcc.hut.fi> and CC 117590-forwardedATbugs.debian.org. Thanks.