CE> That would work, but if you've taken the time to upgrade to kernel 2.4.x, CE> I would suggest migrating away from ipchains and moving over to iptables. CE> It isn't necessarily a big issue, but iptables has some fixes for some of CE> the perhaps subtle design flaws in ipchains. Its worth the time... Is also have few more, doesn't it ;) *Grin*.