Incoming from RatÓn: > So it is not ment for iptables testing. How can I test my config then?? Here's how I do it: iptables -A INPUT -s ! 127.0.0.1/32 -m state --state NEW -j LOG iptables -A INPUT -s ! 127.0.0.1/32 -m state --state NEW -j DROP Then I just watch Xconsole. Modify those to LOG & DROP the packets you're concerned with. -- Any technology distinguishable from magic is insufficiently advanced. (*) http://www.spots.ab.ca/~keeling - -