On Tuesday 29 October 2002 1:09 am, Tan Ming Han wrote: > hi, > I seen some examples allowing all traffic (in INPUT and OUTPUT) from lo > interface. Why is it so? Is it becos of the local XWindow connection? X requires this, yes; there are also certain other applications which use things like rpc calls or ident lookups. A simple way to find out what traffic goes across the lo interface is to log it for a while: iptables -A INPUT -i lo -j LOG --log-prefix="In-lo: " iptables -A INPUT -i lo -j ACCEPT Antony. -- Windows: just another pane in the glass.