Hi!! I am a newbie to iptables...I was trying to understand the hooks defined in netfilter.With natting enabled, every pkt shld ideally come to Prerouting hook and then only move to input hook if it is for local m/c itself or forward hook if it is to be forwardedand finally to postrouting.. This is what i have understood..and i hope this is correct..If not,,pls correct me and give ur comments.. But my analysis of pkts says that sometimes, the pkts meant for the local machine come directly to the input hook rather than the prerouting hook..Is it right?????Is yes, why/when does this happen??If no, can what can be the case when this happens?? Paridhi __________________________________________________ Do you Yahoo!? Yahoo! Shopping - Send Flowers for Valentine's Day http://shopping.yahoo.com