You discovered it :-) Probably it is the NAT ! When the packet returns via the inet router it gets someone else's ip. So I must set in iptables on the inet router not to SNAT packets not coming to inet ;-) Thanks, Vladimir Trebicky _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/