Hi! Finally I got the question from my previous message working. I had to deny only the packets with the SYN set. -- p.