> DROPPED IN=eth0 OUT= MAC=66.242.100.81 DST=66.255.255.255 LEN=*78* TOS=0X00 > PREC=0X00 TTL=*64* ID=0 DF PROTO=UDP SPT=*137* DPT=*138* LEN=*58* If you look at the Source Port and Destination Port and the Protocol type you will see that the type of traffic is Windows File Sharing (SMB). The DST address is not a reverse subnetmask, but is instead a broadcast to the 66.x.x.x network. So basically your firewall dropped an smb broadcast packet. If the NIC truly is not connected physically to your cable modem, then most likely this could just be Samba on the local system trying to let the world know it is there, heheh. --------------------------------------------------- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change you mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss