On 02 Sep 2001 14:54:47 -0700, Mike Egglestone wrote: > Do you think its best to change the state of the input chain to DENY and > then just allow ssh ? Yes absolutely. --jcm