I currently have three interfaces installed on my Suse 7.1 PPC system. eth0 eth1 eth2 I am using iptables v1.2 I apply: iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT DROP iptables -A INPUT -i eth0 -j LOG --log-prefix "eth0 incoming" iptables -A INPUT -i eth0 -j ACCEPT iptables -A INPUT -i eth1-j LOG --log-prefix "eth1 incoming" iptables -A INPUT -i eth1 -j ACCEPT iptables -A INPUT -i eth2 -j LOG --log-prefix "eth2 incoming" iptables -A INPUT -i eth2 -j ACCEPT iptables -A OUTPUT -o eth0 -j LOG --log-prefix "eth0 outgoing" iptables -A OUTPUT -o eth0 -j ACCEPT iptables -A OUTPUT -o eth1 -j LOG --log-prefix "eth1 outgoing" iptables -A OUTPUT -o eth1 -j ACCEPT iptables -A OUTPUT -o eth2 -j LOG --log-prefix "eth2 outgoing" iptables -A OUTPUT -o eth2 -j ACCEPT I have been having problems getting my code to restrict access according to the interface. When I ping the IP address that should belong to a particular interface, the route of access appears to randomly select any one of the interfaces instead of only the corresponding one. pinging ip address x.x.x.1 should correspond to input to interface eth0, however at random eth0, eth1, or eth2 ends up being used. the echo for the ping regardless of the input interface always outputs from interface eth0. (I am not sure if that is ping default or not) Upon viewing the logfile the following pattern is apparent. ping -c 3 x.x.x.1 (which should correspond to input interface eth0) may produce something in the log file similar to: eth0 incoming , IN=eth0, OUT= eth1 incoming , IN=eth1, OUT= eth1 incoming , IN=eth1, OUT= eth0 incoming , IN=eth0, OUT= eth0 incoming , IN=eth0, OUT= eth2 incoming , IN=eth2, OUT= eth0 outgoing , IN=, OUT=eth0 eth0 outgoing , IN=, OUT=eth0 eth1 incoming , IN=eth1, OUT= eth2 incoming , IN=eth2, OUT= eth0 incoming , IN=eth0, OUT= eth1 incoming , IN=eth1, OUT= eth0 outgoing , IN=, OUT=eth0 eth0 outgoing , IN=, OUT=eth0 any help on this issue is appreciated. _________________________________________________________________ Join the worlds largest e-mail service with MSN Hotmail. http://www.hotmail.com