Can you please try "iptables -L -t nat"?
Well, with the firewall up, it's:
Chain PREROUTING (policy ACCEPT) target prot opt source destination
Chain POSTROUTING (policy ACCEPT) target prot opt source destination ppp_masq all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT) target prot opt source destination
Chain ppp_masq (1 references) target prot opt source destination MASQUERADE all -- 192.168.1.0/24 anywhere
But with the firewall down (which is how it was when I created each of the tcpdumps):
Chain PREROUTING (policy ACCEPT) target prot opt source destination
Chain POSTROUTING (policy ACCEPT) target prot opt source destination
Chain OUTPUT (policy ACCEPT) target prot opt source destination
I have a strange feeling this problem is at the kernel level, somewhere lower than iptables.
Herouth -- EMAIL: [EMAIL PROTECTED] HOME PAGE: http://herouth.port5.com/
================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]