t Hello, You are using "iptables -A" ... this will append this rule to your list. If you have an accept rule further up that this connection would match then it will be accepted but it hits this rule. You should do a "iptables -I" to insert the rule at the top. Michael. I am not sure I understand the difference between -I and -A Where can I find docs on this? Thanks Michael