Hello, again, hello Just write to let you know... I have solved! It was a stupid thing, but may help some of you, who knows. I added some rules to enable INPUT and OUTPUT from/to the networks behind my router. It was so easy. Regards. > Hi > > We have a VPN. We use iptables in each point and everything is fine. Now > we are changing to a WAN model, but we have a problem. > First, we need remote users to get into the linux box in our corporate. > this bos is the firewall for the corporate LAN. Using VPN works fine till > here. > When we try to connect using the (new) WAN interfaces (using CISCO > routers) we get "operation not permited" error messages. When we change > the default route of one PC in the LAN to the new router and make a > connection from the WAN to that PC it works fine, so the problem is in the > linux bos, indeed with iptables. When I connect from the router to the > linux bos, it works fine, but when trying to connect from the WAN IP or > from other router in the WAn I get the "operation not permited" error. I > think it is a problem related ro reassembling of packages, but have no > idea where to find something helpfull. > > Any idea? > > Thanks in advice. > > Armando Soto >