> some of my users use mirc on irc servers that required > an ident reply (port 113) > i would like the ident requests from the irc server to > be fowarded to the int lan so that mirc can reply to > the requests > i domt know if this is even possible but was wondering > if anyone could help me Did you try using (as one of the first rules) : iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT Rob.