> I use the follow rules > > iptables -P FORWARD DROP > > > but when i use PREROUTING for port 3389, the machines > external, don´t knew connect for the host. > > > How can i accept connections in PREROUTING port. I don't know exactly what it is you want to do, but could it be something like this ? iptables -A FORWARD -p tcp --dport 3389 -j ACCEPT Gr, Rob
