Router wan interface is eth1 and lan interface is eth0 . iptables -A INPUT -m state --state ESTABLISHED , RELATED -j ACCEPT . iptables -A INPUT -i eth1 -j DROP . iptables -A INPUT -i eth0 -j ACCEPT iptables -A FORWAR -m state --state ESTABLISHED , RELATED -j ACCEPT iptables -A FORWARD -i eth0 -o eth1 -j ACCEPT iptables -A FORWARD -i eth1 -o eth0 -j DROP . I dont have pptp connection tracking module installed . But i can see GRE protocol packet comed from wan gets routed and reaches my client machine connected to eth0 ?. I can see message id is 0 in GRE packet . I have only pptp connection . Any hint is really appreciated ? Thanks, Ratheesh -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html