On Friday 08 November 2002 8:31 am, alex wrote: > As I understood it forwarded packets never went over the OUTPUT chain, > the OUTPUT chain is only to filter what local processes send out. That is correct. > In trying to debug my firewall (see earlier message on the user list) I can > see the final rule of my to-lan chain (attached to output) dropping > packets when the incomming web connection hangs. What are your FORWARDing rules ? Antony. -- Success is a lousy teacher. It seduces smart people into thinking they can't lose. - William H Gates III