Hello, kapetr a écrit : > > http://ubuntuforums.org/showthread.php?t=1339951 > > What do You thing ? I think that your box has sysctls net.ipv4.conf.*.rp_filter=1. These settings enable reverse path filtering for source validation. If rp_filter is enabled for an interface and the source address of an incoming packet is not routed via the same interface (either via another interface or no route), then the packet is dropped. This happens after the PREROUTING chains and before the INPUT or FORWARD chains. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html