hi, i am learning iptables through the HOWTO. there is one command i am not sure. can someone explain it to me please? $IPTABLES -A FORWARD -i $LAN_IFACE -j ACCEPT from author 'this rule will allow all traffic from our $LAN_IFACE to any other interface to flow freely,in other word,in other words allow all traffic from our LAN to the Internet'. is there a default '-o eth+' in the above command that is omitted ? should it better be $IPTABLES -A FORWARD -i $LAN_IFACE -o $INET_IFACE -j ACCEPT INET_IFACE as (internet_interface) /James.Q.L ______________________________________________________________________ Post your free ad now! http://personals.yahoo.ca