>Today I was testing a Centos 4.1(RH ES4 clone) with 2.6.9-11.EL and a >Verizon dsl connection. I couldn't get any connection tracking related >rules working on the pppoe interface. > >-A INPUT -i ppp0 -m state --state RELATED,ESTABLISHED -j ACCEPT >-A FORWARD -i ppp0 -m state --state RELATED,ESTABLISHED -j ACCEPT Where's the handling for NEW connections? Otherwise you won't succeed if your default policy is !ACCEPT. >Googling uncovered a thread with respect to connection tracking being >broken with bridging. You got a bridge in there? Jan Engelhardt --