It is possible, but what I would recomend is that you read The Rusty
Russel Unreliable Guide to iptables which is at (if the bookmark I
have is not obsolete) http://netfilter.samba.org/unreliable-guides --
you will know a lot better what you are doing after that.
--
John Covici
covici at ccs.covici.com