On Thu, 08 Nov 2007 06:03:50 +0900 John Summerfield <debian@xxxxxxxxxxxxxxxxxxxxxx> wrote: > > -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT > > -A FORWARD -s 192.168.0.3 -i ppp0 -j ACCEPT > > -A FORWARD -j REJECT --reject-with icmp-host-prohibited > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ 1. I have allowed for 192.168.0.3 to pass, have I? 2. Commenting out the last line did not solve the prolem - the 192.168.0.3 simply stopped printing messages "From 192.168.0.1 Destination host prohibited" for the packet have started to e dropped as I assume. So?