Hmm, I don't think I was clear enough in what I was asking (but thank you for the responses, still very informative). I have a router/firewall running debian with a 2.5.75 kernel and the layer7 patch. Basically, I was wondering if someone could give me an example of blocking packets using the tc/ip/iptables commands based on the protocols in the layer7 patch. Something like Client sends AOL IM login request. It gets to the firewall and gets dropped because the layer7 patch recognized it as an AOL packet. -- Derek _______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/