> just found this, not sure it's related: > > http://www.spinics.net/lists/netfilter-devel/msg13554.html Thanks for that link. But it looks that also use --zone, so this just adds another level of confusion to me ;-)