Hi On Sat, Dec 11, 2004 at 01:45:08PM +0100, Antonio Pérez wrote: > iptables --table nat --append POSTROUTING --out-interface > $ifc_internet -j MASQUERADE > the hosts of the internal network can do ping to internet, and this is > normal, but they can not open any web or conection the msn , they > only can do ping. This is very stranger. I try the kernels > 2.6.7,2.6.7,2.6.8 and 2.6.9 and they do no work. You can ping so NAT and routing seems to work. Are there any other rules in the FORWARD chain? <try> maybe you should check if DNS is working? </try> > Can somebody help me, please? send more Info e.g. output of iptables -L -nvx iptables -t nat -nvx > Sorry for my bad english. me too ;-) Andreas Grabner