Yes you can? You haven't reasearch much have you? Do this... IPCHAINS="/sbin/iptables" # ;) Just remember that iptables structure is different to ipchains in that INPUT is no longer part of the forwarding line.. it handles packets destined for itself ONLY.. Thanks, ____________________________________________ George Vieira Systems Manager georgev@xxxxxxxxxxxxxxxxxxxxxx Citadel Computer Systems Pty Ltd http://www.citadelcomputer.com.au -----Original Message----- From: Esteban [mailto:eribicic@xxxxxxxxxxxx] Sent: Wednesday, May 28, 2003 8:02 AM To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: upgrade to iptabels from ipchains i used to have this: $IPCHAINS -N soporte $IPCHAINS -A FORWARD -s 10.0.0.0/25 -j soporte $IPCHAINS -A soporte -s 10.0.1.1 -j MASQUERADE $IPCHAINS -A soporte -j DENY how can i do this with iptables? the idea is to use chains for each group. thanks!