* Raffaele D'Elia <r.delia@starcomitalia.com> [03-09-04 12:01]: > > ... > ... > > What about icmp type 12? Actually I drop it; but I'm not sure about it. > Moreover I drop !related,established udp packets. Accept all UDP-packages you need and Reject all other. You can also use a limit and Drop the rest. Sometimes it is difficult to related an package e. g. NTP-Protocol. -- Tom