<linux_kurt@xxxxxxxxx> wrote: >when applying these rules, iptables -L >it shows >Chain INPUT (policy DROP) >target prot opt source destionation >Accept all -- anywhere anywhere >Chain OUTPUT (policy DROP) >target prot opt source destionation >Accept all -- anywhere anywhere >There is no place to differentiate interface eth0 or eth1 Sure there is. But you'll find those fields using iptables -L -v -- Samuel Jean SysAdmin & NetAdmin at cookinglinux.org