On Sunday 28 March 2004 22:07, Cody Harris wrote: > I rewrote the rules following your suggestions. It still doesn't work: > Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) > any any anywhere 192.168.0.2 tcp dpt:ssh > state RELATED,ESTABLISHED What I meant want a separate rule in FORWARD for established or related packets. However, please see the other mail I have just sent. David