Hi gents, About all I've done so far is cross-compile iptables for an XScale ARM based system. And of course read the FAQ a few times, but its still pretty much Greek to me :) I found the attached script which seemed like a good place to start. Running it produces the output below : iptables v1.2.: can't initialize iptables table `ACC': Table does not exist (do you need to run insmod. Perhaps iptables or your kernel needs to be upgraded. iptables v1.2.: can't initialize iptables table `ACC': Table does not exist iptables v1.2.: can't initialize iptables table `ACC': Table does not exist . iptables v1.2.: Can't use -N with -A Try `iptables -h' or 'iptables --help' for more information. /sbin/firewall: -A: command not found As far as I know, the kernel has been compiled with ip filtering turned on (I can send the options that I've checked if this would help?). Question 1: What is table ACC? Perhaps ACCEPT truncated (for some unknown reason) ? Question 2: If I want to start off by writing my own extremely simple tables, where should these be stored, or is there a way to tell iptables where to look for them? Running iptables -L -v, produces the following : Chain INPU (policy DROP 0 packets, 0 bytes pkts byte targ prot opt sour destinat 0 0 ACCE -- anywhere anywhere 0 0 DROP icmp -- anywhere anywhere 52 4744 ACCE -- ixp1 192.168.200. anywhere 0 0 RETU -- anywhere anywhere Chain FORW (policy DROP 0 packets, 0 bytes pkts byte targ prot opt sour destinat 0 0 DROP icmp -- anywhere anywhere Chain OUTP (policy DROP 14 packets, 8600 bytes pkts byte targ prot opt sour destinat 0 0 ACCE -- anywhere anywhere 0 0 DROP icmp -- anywhere anywhere 30 4168 ACCE -- ixp1 anywhere 192.168.200. 0 0 RETU -- anywhere anywhere It seems the table names are being truncated here to 4 characters ?? Best regards Steve Comfort