\_ SMTP quoth Craig White on 2/25/2002 18:19 as having spake thusly: \_ \_ On Mon, 2002-02-25 at 14:45, David A. Sinck wrote: \_ > \_ > [...] \_ > You may need to to -j ACCEPT in masquerade chain for trusted devices? \_ > \_ ---- \_ wow - 2 messages in 1 day David. oh hush. \_ as default policy - ACCEPT is a really poor idea for ipchains - for \_ testing purposes, OK - but it will ultimately have to be changed to \_ REJECT or DENY to have some security and piece of mind...be it forward, \_ input or output. It's also not all that keen for iptables. Having futzed with both ipchains and iptables, I much prefer iptables. A potentially informative iptables link for masquerading: http://www.linuxdoc.org/HOWTO/Masquerading-Simple-HOWTO/summary.html David