Hi all, I have a strange behavior in my Red Hat 7.3 box using iptables...I allow certain users to send ICMP packages across the firewall, using the FORWARD chain and NAT table(with SNAT). However sometimes the firewall stop routing the packets, but only certain traffic. In my case is the traffic accross the FORWARD chain. Then... I just restart (flush) the iptables script and it works again. I'm wondering whether there is some buffer which is getting full, so the iptables code stop routing the packets? Is there anything I should check? I use state-full connections in all the rules. Thanks in advance Luis Fernando Barrera luba@assist.com.gt