Thanks to all the people who gave their suggestions. What I have learnt from this is 1) Iptables doesnt understand virtual interface directly 2) I shouldnt use the interface parameter and ip address tuple for iptables, just use the ipaddress. Thanks, Bharath --- Bharath Ramesh <bramesh@vt.edu> http://people.cs.vt.edu/~bramesh