HI All I am A newbie to iptables and was wondering can some one help me with a issue. I got A linux server with 2 network cards installed in it one is the internal network and other is the external network. Nothing gets out of the internal network unless it goes via SQUID. My email comes in on Postfix and gets scanned for spam and viruses before it gets passed on to the exchange server on the internal network. My Question is this. I got a server on the internal network that needs to have active and passive ftp access to sites. This is the only box that needs ftp access. how do I tell iptables that only active and passive ftp is saposed to be NAT's and that it must leave the rest of the data up to my Linux server to handle. TIA Thomas

This site tells you all that http://netfilter.samba.org/unreliable-guides/NAT-HOWTO/NAT-HOWTO.linuxdoc.html#toc1 Caveman