Nicole Hahnel wrote: > kernel: -- DENY IN=dsl0 OUT= MAC=xxxx SRC=xxx DST=xxx LEN=72 TOS=0x00> PREC=0x00 TTL=57 ID=55683 PROTO=4>> Do I have to add a rule to allow PROTO 4? Yes, it is a know bug.Accept protocol 4 on input and you are fine.