Hey, Dan's suggestion to enable debug spew from spawned processes with --enable-debug reminded me that the only reason I wanted the NO_ERRORS stuff in the iptables code was to avoid spewage when trying to add/delete builtin iptables chains. Cheers, Mark. --