Hi , I have a linux router with only one rule iptables -t nat -A POSTROUTING -i eth0 -o eth1 -j MASQUERADE What i understood is (by googling net ) is that adding this will give symmetric nat support to my router , is it true ???. 1. To have " full cone nat" support what should i do ?? Is it same as DMZ configuration ?? 2 . restricted nat and port restricted nat cannot be implemented using iptables ??? 3 . i installed windows STUC and tested . Test results show it is a portrestricted nat ... But if i make default policy for wan INPUT and wan PREROUING as REJECT , test got failed ??? is it iptables dependend ?? Thanks, Ratheesh -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html