There used to be a -C options to iptables that you could use to check a 
packet against your firewall rules.  It appears to be gone, and I can't 
find a replacement. Does anyone know of a replacement?

Thanks,

Eric