Hello Askar, I believe he already has this rule: "Chain POSTROUTING (policy ACCEPT) num target prot opt source destination 1 MASQUERADE all -- anywhere anywhere" Actually, he is able to access Internet (??)... Angico, Your problem doesn't seem to be related to IPTables since you can access the Internet just fine. If you can access "http://facilcotacao.com/" but can't access "http://facilcotacao.com/autopecas/", unless you are using layer7 filtering, you problem is somewhere else. I tried to access the site and saw it redirects to "http://www.facilcotacao.com.br/autopecas/", I believe you should check for DNS resolution, etc. Best Regards, Silvio Fonseca > angico, on 02/26/2007 05:45 PM [GMT+500], wrote : > > hi, everybody! > > i have a problem that you may help to solve, surely. > > i have a server (a) connected to the internet via eth0/ppp0 (adsl). > > another computer (b) is connected to this server thru eth1, and it should > > reach the internet via the server which is its gateway. and so it did!... > > up to a month ago. i think nothing's changed. all i did was a > > re-installing of my gentoo based system on the server, due to problems on > > the hard-disk. but firewall rules (iptables) remain the same. and the > > netted computer can't reach the internet anymore! things got exquisite > > because: > > Try this rule on your gateway.. > > > iptables -A POSTROUTING -t nat -o ppp0 -j MASQUERADE > > Thanks