Anybody have a good "block everything, allow *these* ports, still allow ping/traceroute/etc" IPFilter config for a *server*? I looked at the IPFilter Howto, but it seems more concerned with running it on a *client* rather than a box that has public services. Bill -- bill bradford mrbill at mrbill.net austin, texas