Thanks Antony, you did fine. ByTheWay, about ftp service, do u mean that w/ iptables I can set such rules that can detect and pass the data connection corresponding to existing control-connection further than ordinary accepting control-conneciton to fwd. Does RELATED state match such cases? Regards __Radien__