I have no problems updating several Windows machines behind a Mandrake machine with iptables. I do NOT have squid running, and only run the standard iptables suite vs. the canned Mandrake firewall. I do not believe this is an iptables issue, but perhaps something else Mandrake has done with their firewall setup. My rules are very simple, and were obtained by following the tutorial from Oskar (http://iptables-tutorial.frozentux.net/iptables-tutorial.html) I go back to this document often, and seem to glean something new from it each time. (Thanks Oskar!) You shouldn't have to have any ports open, but should use snat from the internal machines to your external ip address, and dnat from the external ip address to the related,established ports. That should be it. -=Ray --------------------------------------- He who gets excited in fighting is sure to make mistakes. Baron Manfred von Richthofen > -----Original Message----- > From: netfilter-admin@xxxxxxxxxxxxxxxxxxx > [mailto:netfilter-admin@xxxxxxxxxxxxxxxxxxx] On Behalf Of > cbaker@xxxxxxxxxxxxxxxxxxx > Sent: Wednesday, February 11, 2004 11:03 AM > To: netfilter@xxxxxxxxxxxxxxxxxxx > Subject: Windows Update through Mandrake firewall > > > I am having trouble running Windows Update through a Mandrake > Multi Network Firewall. I have already asked for help in > several other > forums. > > I am able to browse other web sites just fine. The Windows > Update site > appears to fail up when I checks my PC for updates. Microsoft's site > support site said that I should "disable the firewall." > > What ports do I need to open? What rules do I need to have? Could > this be a Squid issue (our web proxy server)? > > Thanks, > > Chris > > > ======================================== > Chris Baker -- technical specialist > 614-839-2447x108 > cbaker@xxxxxxxxxxxxxxxxxxx > Big Brothers Big Sisters of Central Ohio > www.bbbscentralohio.org > Opinions expressed in this e-mail are solely my own. > >