Would someone be willing to explain the -y flag in ipchains for me? Maybe an example of when/why it would be used? I want to allow telnet to a outside (internet) server only when the connection is initiated by a certain internal (192.168.2.x) ip. Mike mgcon@getnet.com http://www.getnet.com/~mgcon Phoenix, AZ USA