thanks for replying. I have another deployment using IPtables, which I could do this fine.Btw, I posted to the wrong category, how can I move it?