It is possible, but what I would recomend is that you read The Rusty Russel Unreliable Guide to iptables which is at (if the bookmark I have is not obsolete) http://netfilter.samba.org/unreliable-guides -- you will know a lot better what you are doing after that. -- John Covici covici at ccs.covici.com