Noel, Thanks very much for pointing out the graph. Although my current knowledge of packet flow in netfilter couldn't really understand "it also shows why it doesn't work as expected" yet. BR,