: correct i do allow ports 81 and 80 on my FORWARD chain as well on : INPUT and OUTPUT iptables -t filter -A FORWARD -p tcp -d $PRIVATE_DEST --dport 80 -j ACCEPT iptables -t filter -A FORWARD -p tcp -d $PRIVATE_DEST --dport 81 -j ACCEPT Check out: http://iptables-tutorial.frozentux.net/ Ciao for now, -Martin