Hi all. Supposing I create a chain whose policy is LOG and I use a syntax like: iptables -A NAMEOFCHAIN -i eth0 -o eth1 -p icmp --icmp-type ECHO_REPLY -j DROP. Would the packet first be logged and then dropped? Also, does -i eth0 -o eth1 imply that the packet is going in eth0 and out eth1? Or does it imply that the packet is going in eth0 and out eth1 at the same time, which is impossible anyway? Thanks! -------------------------------------------------------------------- mail2web - Check your email from the web at http://mail2web.com/ .