If the daemon listens on port 25, then the connection will be destined to it on port 25. So Input chain allows destination port 25 Output chain allows source port 25 Do you have a specific need for blocking all output packets? Ted On Thu, 2004-01-22 at 02:50, Rakotomandimby Mihamina wrote: > HEllo , > I'm running sendamil on my box . > I'm dropping all outgoing packets ( policy ) . > I want the sendmail packets not to be dropped , have i got to allow outgoing > "--sport 25" packets , "--dport 25" or just "--ports 25" > > thanks in advance for your help .