-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 John, > Maybe I'm just missing something... I have > > -A RH-Firewall-1-INPUT -p tcp -m tcp -m state --dport 53 --state NEW -j > ACCEPT > -A RH-Firewall-1-INPUT -p udp -m udp -m state --dport 53 --state NEW -j > ACCEPT > -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT > > I'm not very good with firewall rules, but I assume these are the three > that are important? I find shorewall is a fantastic front-end to iptables. Options such as "shorewall safe-restart" - (which prevents the new rules being permanently applied by asking you for confirmation after they've been applied. If you don't respond then it reverts back to the old ruleset). It's saved me a lot of hassle :) Regards, Andy -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkiHaDoACgkQauMjEM4rxIQO6wCeKBb+QOj4/77Ocs8hUD+SgWY5 lV4AoLRNqOUTyyFdfMlwQLrRK7YaFpgz =F3IR -----END PGP SIGNATURE-----