Can I put IPv6 rules into the regular etc/iptables/iptables.rules file containing only IPv4 rules otherwise? I noticed that both /usr/sbin/iptables and /usr/sbin/ip6tables depend on the same .so libs, so me thinks these libs need to have IPv6 support and all is well. Also, to make IPv6 work I put a rule to pass IPv6 protocol traffic outbound on eth+. Inbound packets are propably handled by the customary "-A INPUT -i eth+ -m state --state ESTABLISHED,RELATED -j ACCEPT", as they get into the machine somehow. I didn't check packet counters, though. clemens