How does conntrack work ?? Does it care if the source/destination IPs change as well, due to load balancers ?? I mean, if an outsider talks to x.y.z.1 and the load balancer forwards that packet to x.y.z.2, so the outsider will get a reply from x.y.z.2 and continue the communications with it. Does conntrack recognize that ? -- Mohamed Eldesoky www.eldesoky.net RHCE