> This is a good idea. I think you are probably right. The request received by the server perhaps does't come from 119 in the server's eyes, although the webpage IS opened from 119. But the server is a linux environment, and tailored quite a bit to run embedded system software. So apache is not in "usr/local". I've got to try to locate the access log in the printer first. > :-) I haven't yet read your previous mails about the routing tables. But, if you could give this a try, then we can confirm the hypothesis. Just like you blocked client 119 and it failed, and then you tried 120 and it worked; block the gateway and unblock 120. If it works from 120, but it doesn't work from 119 (now), it means that the request is coming from the gateway for 119. -- Vimal -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html