this is slightly off topic, but i'm asking anyway :) when taking a look at the byte counters with ifconfig, i get the following results: eth0 Link encap:Ethernet HWaddr 00:60:08:6B:A2:FE UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1 RX packets:16181723 errors:4 dropped:0 overruns:0 frame:0 TX packets:17970946 errors:0 dropped:0 overruns:0 carrier:0 collisions:581668 txqueuelen:100 RX bytes:3686193757 (3515.4 Mb) TX bytes:1361276683 (1298.2 Mb) Interrupt:11 Base address:0x6000 intech007:~ # ifconfig eth1 eth1 Link encap:Ethernet HWaddr 00:60:08:6B:A2:1A UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1 RX packets:18559613 errors:0 dropped:0 overruns:0 frame:0 TX packets:16380728 errors:0 dropped:0 overruns:0 carrier:388 collisions:184706 txqueuelen:100 RX bytes:2205111742 (2102.9 Mb) TX bytes:3719071392 (3546.7 Mb) Interrupt:9 Base address:0x6100 This machine is a bridging transparant firewall. eth1 is internet side, and eth0 is lan side. Is it correct to assume, that the firewall rules in use reduced the incoming traffic from 2102.9 MB to 1298.2 MB? Isn't that too big a reduction..? Am i making a thinking error here..? Thanks for any replies. Yours, Mourik Jan