I tried to reply you twice, somehow emails are not going out through my LAN machine. I tried as you adviced but it didn't work. Please find my rc.local file below. My iptables file is totally commented and restarted. I am facing following probles. PROBLEM-1 When I try to send email to squid emailing list I get following error. **** Hi. This is the qmail-send program at squid-cache.org. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. <squid-users@xxxxxxxxxxxxxxx>: ezmlm-reject: fatal: Sorry, I don't accept messages of MIME Content-Type 'multipart/alternative' (#5.2.3) --- Below this line is a copy of the message. Return-Path: <adssquid@xxxxxxxxx> Received: (qmail 65674 invoked from network); 27 Aug 2003 11:00:53 -0000 Received: from web20502.mail.yahoo.com (216.136.226.137) by squid-cache.org with SMTP; 27 Aug 2003 11:00:53 -0000 Message-ID: <20030827110050.81255.qmail@xxxxxxxxxxxxxxxxxxxxxxx> Received: from [203.94.221.44] by web20502.mail.yahoo.com via HTTP; Wed, 27 Aug 2003 04:00:50 PDT Date: Wed, 27 Aug 2003 04:00:50 -0700 (PDT) From: ads squid <adssquid@xxxxxxxxx> Subject: RE: [squid-users] delay pool problem To: Adam Aube <aaube@xxxxxxxxxxxxxxxxxxxx>, squid-users@xxxxxxxxxxxxxxx In-Reply-To: <000001c36c08$42969990$647fa8c0@xxxxxxxxxxxxxxxxxxxx> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="0-181363567-1061982050=:80891" --0-181363567-1061982050=:80891 Content-Type: text/plain; charset=us-ascii ***** Also my LAN users can not send emails through outlook express. However when email can be send through dialup connection of LAN user. PROBLEM -2 When I try to upload files from LAN user to my outside webserver provider through CuteFTP it gives following message **** Login successful COMMAND:> TYPE I 200 Type set to I. COMMAND:> pwd 257 "/" is current directory. COMMAND:> TYPE A 200 Type set to A. STATUS:> Retrieving directory listing... COMMAND:> PORT 192,168,0,42,4,62 500 Illegal PORT command. STATUS:> Error opening data socket ***** I can upload files to my webserver from dialup connection. My rc.local is as follows : #!/bs script will be executed *after* all the other init scripts. # You can put your own initialization stuff in here if you don't # want to do the full Sys V style init stuff. #!/bs script will be executed *after* all the other init scripts. # You can put your own initialization stuff in here if you don't # want to do the full Sys V style init stuff. touch /var/lock/subsys/local route del default gw 202.183.69.129 dev eth0 iptunnel add tunnel0 mode ipip local 202.183.69.130 remote 202.183.73.206 ttl 255 ip link set tunnel0 up ip addr add 202.63.162.62/30 dev tunnel0 route add default gw 202.63.162.61 dev tunnel0 route add -net 202.183.73.204 netmask 255.255.255.252 gw 202.183.69.129 echo 1 > /proc/sys/net/ipv4/ip_forward iptables --flush iptables --table nat --flush iptables --delete-chain iptables --table nat --delete-chain iptables --table nat --append POSTROUTING --out-interface tunnel0 -j MASQUERADE iptables --append FORWARD --in-interface eth1 -j ACCEPT #iptables -t nat -A POSTROUTING -p tcp --dport 25 -j MASQUERADE #iptables -t nat -A POSTROUTING -p tcp -o eth1 -j SNAT --to 207.106.22.35:80 #iptables -t nat -A POSTROUTING -p tcp -s 192.168.0.23 -d 207.106.22.35 --dport 21 -j MASQUERADE #iptables -t nat -A POSTROUTING -p tcp -s 192.168.0.23 -d 207.106.22.35 --dport 80 -j MASQUERADE #iptables -t nat -A POSTROUTING -p tcp -s 192.168.0.23 -d 207.106.22.35 --dport 21 -j MASQUERADE #iptables -t nat -A POSTROUTING -p tcp -s 192.168.0.23 -d 207.106.22.35 --dport 80 -j MASQUERADE iptables -t nat -A PREROUTING -p TCP --dport 80 -j REDIRECT --to-port 3128 #iptables -A FORWARD -s 0/0 -d 0/0 -p tcp --dport 4662 -j DROP #iptables -A FORWARD -s 0/0 -d 0/0 -p tcp --dport 1214 -j DROP #iptables -A FORWARD -s 0/0 -d 0/0 -p tcp --dport 4672 -j DROP # he other init scripts. #iptables -t nat -A POSTROUTING -p tcp --dport 25 -j MASQUERADE #iptables -t nat -A POSTROUTING -p tcp -o eth1 -j SNAT --to 207.106.22.35:80 #iptables -t nat -A POSTROUTING -p tcp -s 192.168.0.23 -d 207.106.22.35 --dport 21 -j MASQUERADE #iptables -t nat -A POSTROUTING -p tcp -s 192.168.0.23 -d 207.106.22.35 --dport 80 -j MASQUERADE #iptables -t nat -A POSTROUTING -p tcp -s 192.168.0.23 -d 207.106.22.35 --dport 21 -j MASQUERADE #iptables -t nat -A POSTROUTING -p tcp -s 192.168.0.23 -d 207.106.22.35 --dport 80 -j MASQUERADE iptables -t nat -A PREROUTING -p TCP --dport 80 -j REDIRECT --to-port 3128 ***** Thanks __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com