HI ! I gonna make some prog using libiptc wishing to interact with netfilter thru dedicated API , but ... having no notion what specific flags to set with [ set | get ]sockopt () .Would you help me with this kind of info - either as a small code example or as explanation (detailed doc, or link to) ? 'cause for now the only thing I know is that all exhange between userspace and kernelspace of netfilter provides with raw socket . I'm familiar with 'Linux netfilter hacking howto', I've read 'Info for Programmers' - part of this tutorial, but sure I still have no sence how to make proper things because of lack of more detailed info . So, wishing your support and Regards , Kuznetsov FiL