Hello, can someone help mevto understand these rules... $iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 128 $iptables -t nat -A PREROUTING -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 128 Secondly is there any benefit of changing TOS of packets going out i-e... $iptables -A OUTPUT -t mangle -p tcp --dport http -j TOS --set-tos Maximize-throughput any help will be greatly appreciated. regards Askar -- (after bouncing head on desk for days trying to get mine working, I'll make your life a little easier)