Description of problem: -A loc2fw -p 6 --dport 8080 -m conntrack --ctorigdst ! 10.3.0.10 -j ACCEPT fails with: iptables-restore v1.4.1.1: host/network `!' not found Try `iptables-restore -h' or 'iptables-restore --help' for more information. Version-Release number of selected component (if applicable): libnetfilter_conntrack-0.0.89-0.1.svn7356.fc9.i386 How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
iptables has nothing to do with libnetfilter_conntrack.
Please have a look at the man page. The syntax of the ctorigdst option is: [!] --ctorigdst address[/mask] Closing as NOT A BUG.