The question is, how do I allow ICQ? (I'm using Everybuddy <http://www.everybuddy.com/> as an ICQ client.) I've got everything else working. Its server, icq.mirabilis.com port 4000, sends UDP packets to the firewall, to the port from which the translated UDP packets apparently originated. There's no pre-written module for this protocol, as there is for quake, ftp and others. Yes, there is, check: http://members.tripod.com/~djsf/masq-icq/ Serge Maandag. - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org