Hi! > Am Don, 2003-02-27 um 21.23 schrieb Del Winiecki: > Might be an issue with identd. Many ftp servers do reverse identd lookups on > the client. If you drop these on your firewall they have to wait for the timeout. > Reject identd on your firewall: > iptables -A INPUT -p tcp --dport 113 -j REJECT Better use "--reject-with tcp-reset". Quite some time ago, I had strange problems with some (broken?) mail servers refusing to accept mail when I simply REJECTed ident connects - apparently they didn't like the default ICMP error message (icmp-port-unreachable, I think)... Martin