Hi, taking only a very short look before going home I guess there is an error in the second line: do you want to delete ruleset for port 139 or port 5900? Nevertheless, I made the experience nat-rules are not deleteable correctly by *-D* (I used iptables with SuSE 7.2, don't know the iptables-version). So I agree with your opinion this is not really the way it should do. Olaf

...

...

Fabrizio Di Meo <fabriziodimeo@yahoo.it> 20.02.2003 20:06 >>>

Hi, I'm using suse 7.3 and iptables v1.2.2. Performing a prerouting operation like the folowing one: iptables -t nat -A PREROUTING -p tcp --dport 139 -i ppp0 -j DNAT --to 192.168.1.5:139 I got an anomaly because even though it's really working fine it goes on to forward the packets when removed by this: iptables -t nat -D PREROUTING -p tcp --dport 5900 -i ppp0 -j DNAT --to 192.168.1.5:5900 I couldn't explain that such iptables' behaviour....is here anyone who can? Thank you, Fabrizio --------------------------------- Yahoo! Cellulari: loghi, suonerie, picture message per il tuo telefonino