> iptables -A INPUT --source 192.168.0.0/16 -j DROP > > Now, shouldn't that block any and ALL traffic from any > computer on the 192.168.*.* subnet? well that is enough to block all packets from that subnet, however, maybe you have other rules that accept traffic before this rule. try -I INPUT to put it at the begining of the chain. Regards, Maciej Soltysiak