Does a packet that needs to be forwarded ever hit the INPUT chain? What is the relationship between mangle & filter tables and the chain FORWARD, are there two FORWARD chains; one for mangle and one for filter or do they share the same chain?. When is the decision to move the packet out the internal interface made, or is this something I must specify? Links to more documentation are welcome answers, thank you. __________________________________ Do you Yahoo!? Friends. Fun. Try the all-new Yahoo! Messenger. http://messenger.yahoo.com/