I want to deny all icmp except for a few key ones. I've tried -p icmp -j REJECT and the only thing it stops is maybe traceroute. echo-request still works, time-request still works as well as many more I'm sure. Any ideas? -- Kevin - cog@iwz.com