Neil Aggarwal wrote on Thu, 6 Nov 2008 08:33:59 -0600: > /sbin/iptables -A OUTPUT -o eth0 -s $ETH0_IP -p tcp --sport http --dport > 1024: -m state --state ESTABLISHED -j ACCEPT Why do you try to filter outbound connections at all? If "something" makes it on your machine the first thing they will do is drop your rules. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com