On Mon, 13 Oct 2003 09:06:29 -0400 (EDT), "Robert P. J. Day" <rpjday@xxxxxxxxxxxxxx> wrote in message <Pine.LNX.4.44.0310130905370.17437-100000@xxxxxxxxxxxxxxxxxxxxx>: > On Mon, 13 Oct 2003, Arnt Karlsen wrote: > > > On Sun, 12 Oct 2003 18:40:27 -0600, > > Herman <Herman@xxxxxxxxxxxxxxxxxxxxx> wrote in message > > <200310121840.27031.Herman@xxxxxxxxxxxxxxxxxxxxx>: > > > > > The real problem that I'm trying to solve is this: > > > Several hosts need to acces a gov service that uses Java and a > > > certain port. > > > > ..if these hosts are initiating this connection from your end, > > " -j ESTABLISHED,RELATED" should do it, instead of you > > running around chasing your tail. > > i suspect you really meant -m state --state ESTABLISHED,RELATED. ..you suspect correctly. ;-) Above match -j ACCEPT , to complete what I meant to say. -- ..med vennlig hilsen = with Kind Regards from Arnt... ;-) ...with a number of polar bear hunters in his ancestry... Scenarios always come in sets of three: best case, worst case, and just in case.