Hi i have question and i hope the question is on the right list . i setup PC router running on ubuntu 10.12, since it is router all IP address are public IP. Topology will be like this Router_to_Intl Router_to_local_IX | | | | | | | | \ / \ / \ / \ / \ / Distribution Router | | Client on Router_to_Intl i have define rule to ACCEPT all INPUT OUTPUT and FORWARD chain, also have enable ip_forward in sysctl. the result is client cant ping outside, but when i define MASQUERADE, ping and connection to internet are working normally. i dont want masquerade happen in this case anything missing on my configuration? Regards Budi Wibowo -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html