OK, maybe the message was too long... how can I debug why a packet (eg: icmp reply) that arrives to my box (tcpdump shows it) and does not show up to ping even if it is: a. destined to my box b. is not dropped by iptables I strongly suspect it is a routing problem, since I only have this if I define more routing tables. So I think you are the guys/gurus that can help me... more details in the mail I sent yesteray: http://mailman.ds9a.nl/pipermail/lartc/2005q4/017168.html Can I log debug messages for a packet that is not routable by the kernel? Can I know which rule is a packet going throught? TIA sandro *:-) PS: I apoligize: in the archives my message figures as "sun" of another thread: I don''t undertand why -- Sandro Dentella *:-) e-mail: sandro@e-den.it http://www.tksql.org TkSQL Home page - My GPL work