Do a tcpdump on each system to verify the packets are leaving on the right interfaces and are being received on the original server (your logs show packet being received by the remote server and response being sent - so you need to see where that packet goes and that it is received by the original server) alan