Hi Wendy, Sounds like you need the following in the FORWARD chain inside the filter table: iptables --append FORWARD -proto tcp -m state --state ESTABLISHED,RELATED --jump ACCEPT and iptables --append FORWARD -proto udp -m state --state ESTABLISHED,RELATED --jump ACCEPT that should solve your problem, if i understood your question correctly -- Regards, Cilliè Burger SA-DOMAIN Internet Services