Hi All, I want to drop all broadcasts on INPUT in a generic way without knowing in advance on which subnet/netmask my appliance is. something like: # iptables -A INPUT -d *.*.*.255 -j DROP # iptables -A INPUT -d *.*.255.255 -j DROP # iptables -A INPUT -d *.255.255.255 -j DROP where * is a wildcard matching any ip. Is this possible with iptables 1.2.7a ? Thanks for any help Alex