11/1 Hello, I have a rule in my output chain as follows: iptables -A OUTPUT -o <external-IF> -m limit --limit 15/minute --limit-burst 10 -j LOG --log-prefix "GW->Intet: " 1. Would this rule LOG packets as long as the rule is matched? 2. If the limit is reached (15/min) would the packets stop going to the next rule in the chain? 3. Supposing I have this rule after the above rule iptables -A OUTPUT -j ACCEPT Would this over-ride the above rule applicable for the external interface? Thank You. Menon __________________________________ Do you Yahoo!? Check out the new Yahoo! Front Page. www.yahoo.com