Besides the xfs - has anyone ever experienced attacks at the higher numbered ports? The reason that I am asking is if block the ports 1024:65536 using ipchains something like... ipchains -A input -j ACCEPT ! -y -p tcp -s 0/0 -d $extIP 1024:65536 which only allows return packets in the high ranges and then people using Netscape for a PASV ftp connection are rejected by a rule further down that specific rejects that which is not specifically allowed. Can I force them to use a specific port via html? i.e.