Hi Fabe, you wrote:

after the chain "user_fw" is set up within the script /sbin/init.d/firewall there is one line I can't understand: $IPCHAINS -A user_fw -s 0/0 -d 0/0 $ACC_FLAG -j ACCEPT Doesen't this line mean I accept everything from any source and forward it to any destination?

1) $ACC_FLAG can modify this, I should think. 2) To get to this line the rules before apply. This just a cleanall, for those packets that could get to this point. 3) At least that's what I think. best dan