hi rob and tanx in advance for all your effort! it was realy nice of you! -> iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT if i understand this correctly, this rule is what it takes to accept all related connections that are caught and just related with any kind of connection (correct me if i'm wrong.. :) )... it doesn´t matter from where it comes or where it goes. just being related is enough for the rule to catch and accept, in this case, the related traffic that came from the www.hotmail.com connection... ;)) without the need to specify the --dport or --sport. hotmail.com was just an exemple! many urls will follow since i'll be accepting almost all kind os urls except those of porno ones, ftp ones... and all those kind of thing that can distract one from his work !! ;)) (hehe!!) about the output chain... i had it to accept, so i assume i don't need those rules about the output chain... is that correct..!? :)) thank you very much, for your time and for your words ;) really apreciate it! skydive! ------------------------------------------------- Email Enviado utilizando o serviço MegaMail