> iptables -N udp-out > iptables -A udp-out -j accept Unless you really want to accept the packets, leave -j ACCEPT out (assuing you have a rule that accepts the traffic later or your default policy is set to ACCEPT). The packet and bytecounters will still increase. > iptables -N udp-in > iptables -A udp-in -j accept Same here. > iptables -A input -p udp -j udp-in > iptables -A output -p udp -j udp-out > > you can see this with: > iptables -L -n -v -x iptables -nvxL udp-in Would give you incoming udptraffic while iptables -nvxL udp-out would give you egress udptraffic. > saludos > Esteban. > -- > Esteban Ribicic > Network Operation Center > UOL-Sinectis S.A. > > Florida 537 Piso 6, Buenos Aires, Argentina > +54-11-4321-9110 ext 2503 > +54-11-4321-9107 Directo > eribicic@uolsinectis.com > www.uolsinectis.com -- Sincerely, Patrik Hildingsson KurD@EFnet/linknet, kurdel@DALnet +46 709 285 445