Ok, I've posted a similar setup I've used in the past that worked like a charm. The script is the actual /etc/sysconfig/iptables. You'll notice the syntax there is somehow different than when you manually create the rules (or put in a script) but you get the idea. Those rules WERE THE MINIMUM required in order to let a machine on internet reach a machine on the internal network (port 8,555). Ask me any question if you don't understand a line (please specify line number in question). eth0 is WAN, eth1 is LAN. Notice how I use "-i" and "-o" for the NICs. http://fpaste.org/sdPF/ HTH, Jorge -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org