Hello, For kazaa, you can use the "match" extension of iptables You can use the "GET /.hash=" or "X-Kazaa-" strings that appear in the kazaa packets. This will not prevent the connections of your clients to kazza, but they will not be able to download anymore Hope this helps -- Zorglub Clément Stenac