--- 192.168.0.1 ping statistics --- 2 packets transmitted, 0 packets received, +2 errors, 100% packet loss Pinging those two internal addresses naturally works on the corresponding servers : [root@callisto blitter]# ping 192.168.1.190 PING 192.168.1.190 (192.168.1.190) from 192.168.1.45 : 56(84) bytes of data. 64 bytes from 192.168.1.190: icmp_seq=0 ttl=128 time=0.2 ms [root@crux domme]# ping 192.168.0.1 PING 192.168.0.1 (192.168.0.1) from 192.168.0.18 : 56(84) bytes of data. 64 bytes from 192.168.0.1: icmp_seq=0 ttl=255 time=2.482 msec My /etc/cipe/ip-up scripts does set a firewall on the cipcb0 device but everything is left on ACCEPT. Does anyone know how I can verify this with some ipchains -L command ? It always gives all firewall also those on the real interfaces ... Tcpdump output on crux of the ping 192.168.0.1 on callisto gives : [root@crux domme]# tcpdump -i cipcb0 Kernel filter, protocol ALL, datagram packet socket tcpdump: listening on cipcb0 10:45:42.299163 < 192.168.1.252 > 192.168.0.1: icmp: echo request 10:45:42.299402 > 192.168.0.252 > 192.168.1.252: icmp: host 192.168.0.1 unreachable [tos 0xc0] 10:45:43.299216 < 192.168.1.252 > 192.168.0.1: icmp: echo request 10:45:43.299432 > 192.168.0.252 > 192.168.1.252: icmp: host 192.168.0.1 unreachable [tos 0xc0] 10:45:44.299458 < 192.168.1.252 > 192.168.0.1: icmp: echo request Any ideas ? Do I need to post my options files ? I don't think they are still relevant ... Best greetings !