On Wed, Jun 01, 2005 at 06:21:44PM +0300, Sertys wrote: > Well , this line : > iptables -t nat -A Cid3D99741E.0 -d 192.168.100.0/24 -j RETURN > > change it to -j DROP and it wont generate any replies. -j RETURN, returns > the packet and sends and icmp message to the src! RETURN returns the packet to the calling chain, or enforces the root chain's POLICY if there is no calling chain to return to. your description matches what REJECT does, not RETURN. -j -- "Stewie: Damn the toilet. It's made slaves of you all. It just sits there consuming other people's feces while contributing nothing of its own to society." --Family Guy