I want to try out fail2ban and notice that both, kbs-CentOS-Testing and ATrpms, have shorewall as a dependency. I do not use shorewall and have never used it. I have my own iptables/firewall script and am happy with it. Can I install shorewall without any ill effects to my current sue of iptables or would I need to use shorewall for firewalling from that point on? (It may be a good product, but I really don't want to learn yet another rule syntax.) Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com