so a.) >So "iptables -I FORWARD -m state --state >ESTABLISHED,RELATED -j ACCEPT" might >be a good idea. i should include this ? b.) the port / service is a udp/tcp , port of a half - life game server, so the clients are not on the same subnet they are connecting to x.24.51 > and should FW to .24.58: cya