> SRC=203.121.145.128 The IP address of the packet source host > DST=12.249.253.250 The IP address of the packet destination (eth0) Both of these are public addresses. Do you expect to be routing between two public networks? > DPT=21 Destination Port number used by ftp listening daemon Yep.