Well, I'm having WAY too much fun here. I've got what I consider a reasonable ipchains setup (I even took the skeleton from a howto somewhere ;-), and I'm getting really strange results. Packets are allowed that should not be. Packets are rejected (at the last 'reject all' rule) when they should have matched earlier 'accept' rules. Logging does not work at all any more. Has anyone else had this kind of problem? system: Linux fw.descomp.com 2.2.17-21mdk #5 Tue Oct 10 23:09:29 MST 2000 i486 unknown ipchains 1.3.9, 17-Mar-1999 I can supply my current rules if anyone wants... rusty