Hi With kernel 2.0.x and ipfwadm it was necessary to compile something into the kernel so that it would allow real* traffic to go by. Is the same still valid for kernel 2.2.x with ipchains? Thank you -- Mario Filipe mjnf@uevora.pt http://neptuno.sc.uevora.pt/~mjnf