Hi, Is that matter if I placed the options/extensions ( -m and -p ) in different orders ? Please tell me these 4 configurations make any difference ... in term allows ssh to my workstation. -A INPUT -s 1.2.3.0/24 -p tcp -m tcp --dport 22 -j ACCEPT -A INPUT -s 1.2.3.0/24 -m tcp -p tcp --dport 22 -j ACCEPT -A INPUT -s 1.2.3.0/24 -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT -A INPUT -s 1.2.3.0/24 -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT Thanks ! -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html