To disable modules within the Debian Sarge kernel: Edit the aliases file: /etc/modutils/alias #This is the old way of doing it (maybe woody only or 2.4 kernel) /etc/modprobe.d/aliases Add aliases: alias ip_nat_ftp off alias ip_conntrack_ftp off sudo update-modules Now when I restart shorewall I get two informational error lines when it tries to load the above modules. -- Jeff Rasmussen GPG public key 0x9686C12F