Hello, here is the scheme for the filter table : _____ Incoming / \ Outgoing -->[Routing ]--->|FORWARD|-------> [Decision] \_____/ ^ | | v ____ ___ / \ / \ |OUTPUT| |INPUT| \____/ \___/ ^ | | ----> Local Process ---- in which order are processed the nat, filter, mangle for the OUPUT chain for example ? if i generate a packet locally, will it hit the nat or the filter table first ? (in the OUTPUT context) thanks -- xavier