On Fri, 01 Apr 2011 22:10:58 +0200, Markus Falb wrote: [...] >> Mar 29 17:27:20 mbrc20 kernel: IPT-DROP IN= OUT=lo SRC=192.168.9.20 >> DST=192.168.9.20 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=46910 DF PROTO=TCP >> SPT=56624 DPT=80 WINDOW=32792 RES=0x00 SYN URGP=0 OPT >> (0204400C0402080A4A26F7A50000000001030307) UID=0 >> [...] > Too restrictive > OUT=lo > This is the loopback device! > Add a rule that allows traffic from and to lo What sort of thing might be using it? It only shows up every day or two. Mike.