(sorry if you already saw this -- due to the fact that i've been messing with my iptables setup, i'm not sure this made it out the first time.) i'm looking for the ruleset to filter all samba-related traffic. i realize that this involves ports 137-9, based on what i see in /etc/services. but i did a quick google search and a couple sample sets i've seen refer to TCP traffic, when i've already confirmed that, for example, nmblookup is UDP. so, anyone have a pointer to a nicely-annotated set of rules for samba, mounting filesystems, printing, etc? thanks. in the meantime, i'll just keep experimenting and watching the packets. rday