On Thu, Jun 21, 2001 at 08:13:03AM +0200, Sebastiaan wrote: ... > That is true. However, it seems like a good idea to filter that way. Will > this do the job? > iptables -P INPUT DROP > iptables -A INPUT -i eth0 -d ! 212.127.242.126 -j DROP This will drop all legitimate multicast/broadcast too. -- groetjes, carel