On Mon, Sep 10, 2001 at 10:02:12AM +1000, Roger Keays wrote: > You want to check out ipchains. It is a packet filter which you can use to > reject traffic based on protocol (tcp, udp, icmp), interface, > source/destination address and port numbers. Jeffs idea to control with interfaces a service binds to is much better than to let all services listen on all interfaces and restrict them with ipchains. KISS Phil