2009/11/10 Ralph de Boom <lkml@xxxxxxxxxx>: > Ralph de Boom schreef: Nov 5 18:48:14 sakura kernel: [ 194.028598] TRACE: filter:FORWARD:rule:1 IN=eth1 OUT=eth0 SRC=192.168.1.30 DST=81.4.97.160 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=13005 DF PROTO=TCP SPT=52436 DPT=80 SEQ=2949910603 ACK=0 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204116C01010402) MARK=0x1 Ralph, only the entry above is from one of your iptable rules which looks like the rules you are using to carry out the packet mangling/nat/etc are not being hit - all the others are 'policy' entries which are basically just saying oh look I went via 'x using chain y'.... -- Richard Horton Users are like a virus: Each causing a thousand tiny crises until the host finally dies. http://www.solstans.co.uk - Solstans Japanese Bobtails and Norwegian Forest Cats http://www.pbase.com/arimus - My online photogallery -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html