Hello and thanks to those who replied to my last email on kickstarts and iptables. The %post install goes well, actual rules are where I am now stuck. Does anyone know if it is possible to in just a few lines specify all ports in this subnet accept if from outside of subnet drop? I must admit to being stuck in the iptable structure. I would like to be able to have the system as simple as iptables -A INPUT -s 130.237.230.xxx/25 (is this correct for a machine consisting of 130.237.230.xxx and mask of 255.255.255.128?) the next rule being something saying if not above drop? Suggested place to look would be wonderful.(redhat manual and redhat 8.0 bible give examples but not what I want). The simpler the better. Google searches have turned up long complicated iptables and I would like it to be as short and simple as possible. I need the simplicity for now until I have better mastered this. It was possible to be this short working with cisco switches, surely there is a simple way to set up iptables, that I have not found yet. Thanks for all suggestions and help, Scott