On Monday 2005-August-15 00:47, Grant Taylor wrote: > Can we get an ls -l of the files in question? What is the user that > the web server is running as? The OP said it was "nobody". It's not a file permission issue; it is the fact that only root can manipulate the kernel's netfilter rules. SUID (messy and risky) or sudo(1) (clean and possibly less risky if done right) are really the only solutions. -- mail to this address is discarded unless "/dev/rob0" or "not-spam" is in Subject: header