I am wondering if the following rule will work: iptables -t raw -A PREROUTING -p icmp -m state --state RELATED,ESTABLISHED -j ACCEPT Rgds, -- Pandu E Poluan ~ IT Optimizer ~ Visit my Blog: http://pepoluan.posterous.com Google Talk:ÂÂÂ pepoluan Y! messenger: pepoluan MSN / Live:ÂÂÂÂÂ pepoluan@xxxxxxxxxxx (do not send email here) Skype:ÂÂÂÂÂÂÂÂÂÂÂ pepoluan -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html