Hello Leonardo, Thursday, April 10, 2003, 10:30:07 PM, you wrote: LRM> Use DROP instead of REJECT .... you can only REJECT in filter tables. LRM> nat and mangle tables can only DROP packets .... There are certain cases i want to REJECT --reject-with tcp-reset, or --reject-with icmp-port-unreachable. So from what you are saying, REJECT is impossible in not filter table? (or is it just not implemented?) P.Krumins