Do i really need the last three iptables calls? I think they do the same like the first five calls and could be removed, but i am not sure... finish_rules() { iptables -N CATCH-ALL iptables -A OUTPUT -j CATCH-ALL iptables -A INPUT -j CATCH-ALL iptables -A FORWARD -j CATCH-ALL iptables -A CATCH-ALL -j DROP iptables -A INPUT -j DROP iptables -A OUTPUT -j DROP iptables -A FORWARD -j DROP } -- Greetings Bjoern Schmidt