I don't know why it complains about the --dport option. However, I don't see how -i ath0 option is compatible with the OUTPUT chain. Siva -----Original Message----- From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Joel Lindsay Sent: Tuesday, May 01, 2007 11:27 AM To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: Can't get --dport to work Hi, At one time I had this working. I could match on the ports and deny http traffic from certain interfaces. Now I get an error message and I am not sure what is causing it. Can anyone help? # iptables -A OUTPUT -i ath0 -p tcp --dport 80 -j ACCEPT iptables v1.3.6-20061129: Unknown arg `--dport' Try `iptables -h' or 'iptables --help' for more information. Thanks, Joel Lindsay, B.Eng Project Engineer