Hello, My server in on FC4 eth0 is wan with static IP connected to 512K DSL eth1 is lan - 192.168.0.0/24 WAN -----> eth0 - FC4 server - eth1 -----------> clients ( 192.168.0.0/ 24 ) FC4 server is only for sharing internet , mails, etc for clients system. I do not run any ftp server on ny FC4 server. I have loaded ip_contrack_ftp modules. Clients connected to FC4 server on eth1 should be able to connect to ftp sites. Is the following rule enough ? -A FORWARD -i eth1 -o eth0 -p tcp --dport 21 -j ACCEPT Thanks Varun