On Tue, Jul 15, 2003 at 12:36:16PM -0700, Daniel Chemko wrote: > > How about the fact that these packets are for T/TCP aka Transactional > TCP, not regular TCP! Yes. There must be something about T/TCP packets that prevents it from being matched by a regular "-p tcp" option. I don't know much about T/TCP but reading rfc1644 might help at least block them on the firewall. Ramin