On the uk.comp.os.linux newsgroup recently, a gentleman remarked that he re-initialised his (type -P input DENY style ) firewall every ten minutes from a cron job. When asked why, he said because of ipchains -F; ipchains -X In other words flush rules one by one then delete rules one by one. It seems my /sbin/ipchains is 755 root root. i.e. anybody on the inside can remove my firewall. Hopefully I am missing something. -- Regards from Chris