On Mon, 5 May 2003 10:30:06 +0200, "John Guntenaar" <john@xxxxxxxxxxxx> wrote in message <000401c312e0$8bf85d70$0200a8c0@xxxxxxx>: > That won't work either because the IP's are aliased, so the all have > the same MAC address. ..you have everybody on the _same_ box??? 'iptables -nL OUTPUT' ? ..on your lan firewall; check 'iptables -nl FORWARD' for _outbound_ rules, too, add port matches as needed. > I just want that userid 1234 can't use IP 1.2.3.4 BUT userid 1235 CAN > use that IP to bind for things like IRC sessions (for like a vhost or > something). ..ok, hook up your userid to an ip alias and match that, _then_ drop irc traffic for your bad(?) buddies. Rule _sequence_ rules. ;-) You can set your irc sw to "talk" with just that one ip? ..no, I'm old school and too lazy to type at irc speed, so I have _no_ idea. ;-) -- ..med vennlig hilsen = with Kind Regards from Arnt... ;-) ...with a number of polar bear hunters in his ancestry... Scenarios always come in sets of three: best case, worst case, and just in case.