You should copy the log entry so one can show you what's wrong with it. 194.67.23.25 -outside mail server from that i tried to send mail to my mail server. New not syn: IN=eth0 OUT=eth1 SRC=194.67.23.25 DST=192.168.5.2 LEN=88 TOS=0x00 PREC=0x00 TTL=55 ID=2475 DF PROTO=TCP SPT=25 DPT=49073 WINDOW=57920 RES=0x00 ACK PSH FIN URGP=0 New not syn: IN=eth0 OUT=eth1 SRC=194.67.23.25 DST=192.168.5.2 LEN=88 TOS=0x00 PREC=0x00 TTL=55 ID=4691 DF PROTO=TCP SPT=25 DPT=49073 WINDOW=57920 RES=0x00 ACK PSH FIN URGP=0 New not syn: IN=eth0 OUT=eth1 SRC=194.67.23.25 DST=192.168.5.2 LEN=88 TOS=0x00 PREC=0x00 TTL=55 ID=8159 DF PROTO=TCP SPT=25 DPT=49073 WINDOW=57920 RES=0x00 ACK PSH FIN URGP=0 New not syn: IN=eth0 OUT=eth1 SRC=194.67.23.25 DST=192.168.5.2 LEN=88 TOS=0x00 PREC=0x00 TTL=55 ID=14216 DF PROTO=TCP SPT=25 DPT=49073 WINDOW=57920 RES=0x00 ACK PSH FIN URGP=0 New not syn: IN=eth0 OUT=eth1 SRC=194.67.23.25 DST=192.168.5.2 LEN=88 TOS=0x00 PREC=0x00 TTL=55 ID=31847 DF PROTO=TCP SPT=25 DPT=49073 WINDOW=57920 RES=0x00 ACK PSH FIN URGP=0 New not syn: IN=eth0 OUT=eth1 SRC=194.67.23.25 DST=192.168.5.2 LEN=88 TOS=0x00 PREC=0x00 TTL=55 ID=60204 DF PROTO=TCP SPT=25 DPT=49073 WINDOW=57920 RES=0x00 ACK PSH FIN URGP=0 New not syn: IN=eth0 OUT=eth1 SRC=194.67.23.25 DST=192.168.5.2 LEN=88 TOS=0x00 PREC=0x00 TTL=55 ID=891 DF PROTO=TCP SPT=25 DPT=49073 WINDOW=57920 RES=0x00 ACK PSH FIN URGP=0 New not syn: IN=eth0 OUT=eth1 SRC=194.67.23.25 DST=192.168.5.2 LEN=88 TOS=0x00 PREC=0x00 TTL=55 ID=1009 DF PROTO=TCP SPT=25 DPT=49073 WINDOW=57920 RES=0x00 ACK PSH FIN URGP=0 New not syn: IN=eth0 OUT=eth1 SRC=194.67.23.25 DST=192.168.5.2 LEN=88 TOS=0x00 PREC=0x00 TTL=55 ID=51986 DF PROTO=TCP SPT=25 DPT=49073 WINDOW=57920 RES=0x00 ACK PSH FIN URGP=0 New not syn: IN=eth0 OUT=eth1 SRC=194.67.23.25 DST=192.168.5.2 LEN=88 TOS=0x00 PREC=0x00 TTL=55 ID=40364 DF PROTO=TCP SPT=25 DPT=49073 WINDOW=57920 RES=0x00 ACK PSH FIN URGP=0