What I only want open is dns, http, https, ftp active, ftp passive, ssh and port 10000 will the follow list protect me and only allow the above list throw... or have i gone about it the wrong way?? Johnno ipchains -L Chain input (policy DENY): target prot opt source destination ports ACCEPT all ------ anywhere anywhere n/a ACCEPT all ------ anywhere anywhere n/a DENY all ------ 10.0.0.0/8 anywhere n/a DENY all ------ anywhere 10.0.0.0/8 n/a DENY all ------ 172.16.0.0/12 anywhere n/a DENY all ------ anywhere 172.16.0.0/12 n/a DENY all ------ 192.168.0.0/16 anywhere n/a DENY all ------ anywhere 192.168.0.0/16 n/a DENY all ------ 127.0.0.0/8 anywhere n/a DENY all ------ 255.255.255.255 anywhere n/a DENY all ------ anywhere 0.0.0.0 n/a DENY all ------ 1.0.0.0/8 anywhere n/a DENY all ------ 2.0.0.0/8 anywhere n/a DENY all ------ 5.0.0.0/8 anywhere n/a DENY all ------ 7.0.0.0/8 anywhere n/a DENY all ------ 23.0.0.0/8 anywhere n/a DENY all ------ 27.0.0.0/8 anywhere n/a DENY all ------ 31.0.0.0/8 anywhere n/a DENY all ------ 36.0.0.0/8 anywhere n/a DENY all ------ 37.0.0.0/8 anywhere n/a DENY all ------ 39.0.0.0/8 anywhere n/a DENY all ------ 41.0.0.0/8 anywhere n/a DENY all ------ 42.0.0.0/8 anywhere n/a DENY all ------ 58.0.0.0/8 anywhere n/a DENY all ------ 59.0.0.0/8 anywhere n/a DENY all ------ 60.0.0.0/8 anywhere n/a DENY all ------ 67.0.0.0/8 anywhere n/a DENY all ------ 218.0.0.0/8 anywhere n/a DENY all ------ 219.0.0.0/8 anywhere n/a DENY all ------ 68.0.0.0/6 anywhere n/a DENY all ------ 72.0.0.0/5 anywhere n/a DENY all ------ 80.0.0.0/4 anywhere n/a DENY all ------ 96.0.0.0/3 anywhere n/a DENY all ------ 220.0.0.0/6 anywhere n/a Chain forward (policy REJECT): Chain output (policy DENY): target prot opt source destination ports ACCEPT all ------ anywhere anywhere n/a ACCEPT all ------ anywhere anywhere n/a DENY all ------ 10.0.0.0/8 anywhere n/a DENY all ------ anywhere 10.0.0.0/8 n/a DENY all ------ 172.16.0.0/12 anywhere n/a DENY all ------ anywhere 172.16.0.0/12 n/a DENY all ------ 192.168.0.0/16 anywhere n/a DENY all ------ anywhere 192.168.0.0/16 n/a DENY all ------ 127.0.0.0/8 anywhere n/a _______________________________________________ Perl-Unix-Users mailing list. To unsubscribe go to http://listserv.ActiveState.com/mailman/subscribe/perl-unix-users