> hello, > Hi Pierre > #forward > > iptables -A FORWARD -s 192.168.1.0/24 -j ACCEPT -o eth0 The rule above won't work! you must set the -o flag before you set the -j <TARGET> i. e. iptables -A FORWARD -o eth0 -s 192.168.1.0/24 -j ACCEPT Otherwise the rule won't be accepted by iptables and you have no rule that accepts forwarded traffic when the default policy for the FORWARD chain is set to DROP. --- Fabian Hartmann realdeal@xxxxxxxxxxxx www.realdealz.ch