No. The first rule has a broader scope than the second rule. The second rule limits the destination port to 2000 - 2050, whereas, the first rule will accept any destination port. Qui On Thursday 16 January 2003 10:30 am, Mike wrote: > Are these two rules essentially the same ? > > Thanks, > Mike > > iptables -A FORWARD -i eth2 -o eth0 -m state --state > NEW,ESTABLISHED,RELATED -j ACCEPT > > iptables -A FORWARD -i eth2 -o eth0 -p tcp --dport 2000:2050 -m > state --state NEW,ESTABLISHED,RELATED -j ACCEPT