Ok, I have just compiled a new kernel on this box, and compiled all iptables things as modules... same problem... I have also removed all PAX and GRsecurity stuff just to write those out of the equation. ----------------------------------------- Calypso firewall # lsmod Module Size Used by iptable_filter 3200 1 ipt_MARK 2688 0 ipt_NETMAP 2432 0 iptable_mangle 3072 0 ipt_ttl 2176 0 ipt_tos 1792 0 ipt_tcpmss 2560 0 ipt_state 2176 4 ipt_geoip 4356 0 ipt_conntrack 2688 0 ipt_connmark 1920 0 ipt_SAME 2944 0 ipt_LOG 7424 0 ipt_CONNMARK 2432 0 ipt_REJECT 6784 0 ipt_MASQUERADE 4744 1 ip_nat_snmp_basic 11908 0 ip_nat_ftp 3328 0 iptable_nat 26460 5 ipt_NETMAP,ipt_SAME,ipt_MASQUERADE,ip_nat_ftp ip_queue 11800 0 ip_tables 25600 17 iptable_filter,ipt_MARK,ipt_NETMAP,iptable_mangle,ipt_ttl,ipt_tos,ipt_tcpmss,ipt_state,ipt_geoip,ipt_conntrack,ipt_connmark,ipt_SAME,ipt_LOG,ipt_CONNMARK,ipt_REJECT,ipt_MASQUERADE,iptable_nat ip_conntrack_ftp 73488 1 ip_nat_ftp ip_conntrack 54592 7 ipt_state,ipt_conntrack,ipt_MASQUERADE,ip_nat_snmp_basic,ip_nat_ftp,iptable_nat,ip_conntrack_ftp Calypso firewall # ----------------------------------------- I'm at a serious loss here, i dont know what else to do :( Dave ================================ On 11/9/05, Dave Strydom <strydom.dave@xxxxxxxxx> wrote: > Ok, I have setup a test setup which is doing the same thing, here is > the output of my iptables-save: > >