Hi We have a VPN. We use iptables in each point and everything is fine. Now we are changing to a WAN model, but we have a problem. First, we need remote users to get into the linux box in our corporate. this bos is the firewall for the corporate LAN. Using VPN works fine till here. When we try to connect using the (new) WAN interfaces (using CISCO routers) we get "operation not permited" error messages. When we change the default route of one PC in the LAN to the new router and make a connection from the WAN to that PC it works fine, so the problem is in the linux bos, indeed with iptables. When I connect from the router to the linux bos, it works fine, but when trying to connect from the WAN IP or from other router in the WAn I get the "operation not permited" error. I think it is a problem related ro reassembling of packages, but have no idea where to find something helpfull. Any idea? Thanks in advice. Armando Soto