Hi, looks like some of correct packes are droped Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) num pkts bytes target prot opt in out source destination 1 36142 16M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 TOS match 0x00 2 168K 54M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 TOS match 0x10 3 27 1782 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 4 27 1782 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 in log we can see that TOS of packets is 0x0 they are also packets with 0x10 Mar 5 04:32:10 proliant kernel: IN=eth0 OUT=eth1 SRC=62.176.73.4 DST=62.176.105.30 LEN=76 TOS=0x00 PREC=0xC0 Mar 5 04:32:15 proliant kernel: IN=eth0 OUT=eth1 SRC=62.176.73.4 DST=62.176.105.30 LEN=76 TOS=0x00 PREC=0xC0 Mar 5 04:32:18 proliant kernel: IN=eth1 OUT=eth0 SRC=212.5.149.252 DST=212.5.134.3 LEN=87 TOS=0x00 PREC=0xC0 Mar 5 04:32:19 proliant kernel: IN=eth0 OUT=eth2 SRC=62.176.73.4 DST=62.176.106.69 LEN=88 TOS=0x00 PREC=0xC0 Mar 5 04:32:19 proliant kernel: IN=eth0 OUT=eth1 SRC=62.176.73.4 DST=62.176.105.30 LEN=76 TOS=0x00 PREC=0xC0 Mar 5 04:32:29 proliant kernel: IN=eth0 OUT=eth2 SRC=195.230.9.159 DST=62.176.106.69 LEN=48 TOS=0x00 PREC=0x8 Mar 5 04:32:31 proliant kernel: IN=eth0 OUT=eth1 SRC=62.176.73.4 DST=62.176.105.30 LEN=76 TOS=0x00 PREC=0xC0 Mar 5 04:32:32 proliant kernel: IN=eth0 OUT=eth2 SRC=195.230.9.159 DST=62.176.106.69 LEN=48 TOS=0x00 PREC=0x8 Am I doing something wrong? 10x in advance Nedko