Hi On Monday 21 April 2003 10:42, Jonathan wrote: ... > this is the rule i have tried > > $IPTAB -A FORWARD -p tcp --dport 22 -i eth1 -s 192.168.1.0/24 -d > 192.168.45.0/24 -syn -m state --state NEW -j ACCEPT Isn't "-syn" or "--syn" and "state NEW" the same ?? Axel