I saw this rule someware on the net. $IPTABLES -A FORWARD -o $EXTERNALIF -p udp --dport 137 -j REJECT Whats the use to use reject on a UDP packet? Isn't udp connection-less A more correct shouldn't that be "-j DROP"? Or am I thinking wrong here? Regards Klintan