just 'cause i'm feelin' picky today... "--state NEW" in -t nat is redundant, as only "--state NEW" packets ever traverse -t nat.
Well pick away. ;) (Friendly) Banter back and forth like this is how I have learned a LOT of things over the years. :)
Grant. . . .
