On Thu, 08 Nov 2007 10:03:51 -0800 Mike Wright <mike.wright@xxxxxxxxxxxxxx> wrote: > Here's a possibility. Is your FORWARD chain's default policy DROP? > If so you will need to explicitly ACCEPT from the other source adx > also. Default - is it the last rule on that chain? Or the first rule on it? If first, it is :FORWARD ACCEPT [0:0] if last - -A FORWARD -j REJECT --reject-with icmp-host-prohibited Guess, it is explicitly set to ACCEPT, is it?
