typo (it's BM_MAX_NLEN, not BM_MAX_LEN) (reported by s I n)
diff --git a/extensions/libipt_string.c b/extensions/libipt_string.c
index 51e5828..279f9be 100644
--- a/extensions/libipt_string.c
+++ b/extensions/libipt_string.c
@@ -44,7 +44,7 @@
 static void
 parse_string(const unsigned char *s, struct ipt_string_info *info)
 {	
-        if (strlen(s) <= BM_MAX_LEN) strcpy(info->string, s);
+        if (strlen(s) <= BM_MAX_NLEN) strcpy(info->string, s);
 	else exit_error(PARAMETER_PROBLEM, "STRING too long `%s'", s);
 }