Hi! > set your default policies to DENY (instead of ACCEPT) and try again > ..everything will be blocked except what you specifically state should be > allowed in (dont try this from remote! you may lose access to the machine) I've already tried that way, but it doesn't work out the way I like it. -- p.