Yes, iptables -F (and/or calling your firewall script if you have one). But don't forget to clean up /etc/hosts.deny from time to time, it can get very big if you switched TCP wrappers denial in portsentry. Thomas Ritter