Jason Opperisano wrote: > > Sorry, what useful about the following function ( command line ) ? > > > > > iptables -A FORWARD -i $EXT_IF -o $INT_IF -p tcp --syn -d $SRV1 \ > > > ? --dport 80 -j ACCEPT > > um--it allows the packet through the FORWARD chain of the filter table. > remember--you're trying to build a firewall here. So, must I enable this kind of function for using the Firewall ?