> iptables -A FORWARD -I <eth_lan> -o <eth_inet> -s <net_lan> -j ACCEPT Mmm.. That should obviously be -i, not -I. R.