If the server that you are running this rule on is the same server as your smtp, then you should change the rule to -A INPUT. Regards, Darryl Romano, VCP, RHCE VMware Technical Support 1-877-4-VMWARE 1-877-486-9273 Use our Knowledge Base to search for Troubleshooting information: http://www.vmware.com/kb VMware Community Access: http://www.vmware.com/community/index.jspa -----Original Message----- From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Allan Spagnol Comar Sent: Thursday, October 26, 2006 3:36 PM To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: Block smtp traffic Hi list, this is my first post. I had a internet gateway that I want to block all traffic send to smtp ports ( 25 tcp ). I had done this: iptables -A FORWARD -i eth1 -p tcp --dport 25 -j DROP and I cannot make this rule work, my user still can connect to port 25.... I try to change from drop to reject and still the same problem, where can I look for to make this work ? thanks, Allan -- An application asked: "Requires Windows 9x, NT4 or better", so I´ve installed Linux