On Thursday 22 April 2004 23:17, kmc@xxxxxxxxxx wrote: > i have a 2 machines network in workgroup. One LINUX connected to > INTERNET through ADSL AND A LAPTOP/XP that can't access to my ISP mail > server with message: "can't find pop server's name pop.libertysurf.fr" > and then > "your mail server closed the connection >From looking at your rules I do not see anything that would stop your Windows machine from accessing the Internet however I would check the following: 1) Can your Windows machine resolve the hostname for pop.libertysurf.fr? A good way to check would be to pull up a command line (Start->Run->"cmd" worked in 2000 and most likely will in XP too) and use the tool "nslookup". `nslookup pop.libertysurf.fr` should show you. 2) Does your Windows machine access anything else as expected? For example, can you web surf or use other Internet applications? 3) If no to 2 above, are your DNS settings in Windows correct? I cannot say what they should be as I do not know who your ISP is but if your Linux machine works fine, use the same entry as in /etc/resolv.conf. I would also note that having a default ACCEPT policy can be a bad thing. To satisfy the paranoid a default DENY policy with rules crafted inside to let only what you want through is the safest way to build your firewall. One other note is that based on your ruleset, I have made the presumption that the Linux machine is acting as the gateway. David