I have following RULES . iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT -i lan0 -j ACCEPT iptables -A INPUT -j DROP iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A FORWARD -i lan0 -o wan0 -j ACCEPT iptabkes -A FORWARD -j DROP iptables -A OUTPUT -j ACCEPT But I am able to make H323 calls from lan to wan & wan to lan . 1. ALG will allow wan to lan calls ? No need for specific iptables forwarding rule if alg is needed ? 2. Is there any way in H323 to have calls without support of ALG ( like passive ftp ? ) Thanks, Ratheesh -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html