and also<br><br>iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT<br><br>so it will allow forwarding ACKs and the rest of the TCP &#39;conversation&#39; in ppp0 out eth0<br><br>