> > Hi Jerry, > > according your rules you have opened all incoming traffic to interface > eth0 and eth1. > I think that is the issue. Try to remove or modify them -- > > -A RH-Firewall-1-INPUT -i eth0 -j ACCEPT > -A RH-Firewall-1-INPUT -i eth1 -j ACCEPT > Thanks that does do it... I was using lokkit to config the iptables. Basically this: /usr/sbin/lokkit -q --high --dhcp -t lo ssh:tcp This rule gets put in by default: -A RH-Firewall-1-INPUT -i eth0 -j ACCEPT How do I prevent that? Thanks, Jerry