On Sat, 16 Oct 2004, Christian Storch wrote: > Yes! That resolution is independend from chain FORWARD. But you can probably kill packets before it in PREROUTING. I didn't try, though. But it would be a nice experiment to do sometime. -- "One disk to rule them all, One disk to find them. One disk to bring them all and in the darkness grind them. In the Land of Redmond where the shadows lie." -- The Silicon Valley Tarot Henrique Holschuh