On 08/03/07 12:44, Franck Joncourt wrote: > This is waht I wanted to know, I can't get such a processing without > the user defined chains ; Iptables doesn't do it by itself. The IPTables rules you have posted do not do it, though I think you could use a mport match to accomplish what you are wanting to do. I.e.: iptables -A INPUT -s 192.168.10.14 -p tcp -m mport --source-ports 80,443 -j ACCEPT Grant. . . .