I have the following rules in my firewall script. The first rule executes like expected. The forward rule does not execute. My question is why? If the first rule is executed this will allow the processing of the forward rule chain but there is no log entry for the rule being executed. The AppServerIP is an external IP address. The DBServerIP is an internal Class C address of 192.168.1.241. $IPCHAINS -l -A input -j ACCEPT -i $OUTERIF -p TCP -s $AppServerIP $IPCHAINS -l -A forward -j ACCEPT -i $OUTERIF -p TCP -s $AppServerIP -d $DBServerIP $IPCHAINS -l -A output -j ACCEPT -i $INTERNALIF -p TCP -s $AppServerIP My understanding is that with the first rule doing an ACCEPT we fall out of the input chain and go to the forward chain processing which should then execute the forwarding. After this the output chain will be executed. Have I missed something? Does anyone have an idea? Thank You, David Demland Qa/Process Manager CADTEL Systems, Inc. 11201 N. Tatum Ste. 200 Phoenix, AZ 85028 (602) 648-6054 Fax: (602) 953-4833 ddemland@cadtel.com