Firewall Snipet # Experimental UDP Filters # # iptables -A INPUT -p udp -i eth0 -m state --state NEW,INVALID -j DROP # iptables -A INPUT -p udp -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT # CounterStrike NAT Line # iptables -t nat -A PREROUTING -p udp --dport 27015 -i eth0 -j DNAT --to-destination 192.168.1.25:27015 Ok the UDP filters physically come before my CounterStrike line. In reading Oskar's tutorial I as under the impression that the nat tables rules took precedence before the filter tables.... However the UDP rules drop the incoming CS requests before they are prerouted... What gives? ===== "No touchy NO TOUCHY! Emperor Kuzko -=Emperor's New Groove=-" __________________________________________________ Do you Yahoo!? Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop! http://platinum.yahoo.com