I ve read an tutorial about iptables
http://www.linuxsecurity.com/resourc...l.html#MATCHES

And I was particularly interested in the unclean match, the tutorial states the following :

"The unclean match takes no options and requires no more than explicitly loading it when you want to use it. Note that this option is regarded as experimental and may not work at all times, nor will it take care of all unclean packages or problems. The unclean match tries to match packets that seem malformed or unusual, such as packets with bad headers or checksums and so on. This could be used to DROP connections and to check for bad streams, for example; however you should be aware that it could possibly break legal connections."

I want to know if someone can share some has hands-on experience with this particular match, how useful is it, is its usage recommended or not..under which circumstances ?

Thx for any suggestions ..