On 16 Nov 2002, Nix N. Nix wrote: > +--------+ > |Incoming|-+ > +--------+ | > v > _______________ > / \ +--------+ > |mangle.PREROUTING| +->|Outgoing| > \_______________/ | +--------+ > | ____________ _____________ > v / \ / \ > ____________ +-->|mangle.FORWARD| |nat.POSTROUTING| > / \ | \____________/ \_____________/ > |nat.PREROUTING| | | ^ > \____________/ | v | > | | ____________ ________________ > | | / \ / \ > | [Routing ]-+ |filter.FORWARD|-->|mangle.POSTROUTING| > +->[Decision] \____________/ \________________/ > | ^ > | | > | ___________ > v / \ > __________ |filter.OUTPUT| > / \ \___________/ > |mangle.INPUT| ^ > \__________/ | > | ________ > | / \ > | |nat.OUTPUT| > v \________/ > __________ ^ > / \ | > |filter.INPUT| ___________ > \__________/ / \ > | |mangle.OUTPUT| > | \___________/ > | ^ > | | > +----------->Local Process--------------+ > you should check out oskar's latest (updated) tutorial at frozentux.net. if you go to the HTML-format tutorial, there is a schematic of the packet flow, and it's complete. rday