[Sent back on the list. Please pay attention to the recipient address.] Cory Oldford a écrit : > Is the traffic originating from a process on the machine with the firewall? Of course. The OUTPUT chain sees only packets generated by local processes. This is why the "owner" match is valid only in this chain.