On Tue, Aug 12, 2003 at 04:29:14PM +0530, anantharaman.iyer wrote: > Generally the default policy of any firewall is kept as "Default Deny" and > then the administrator can open up the required ports. So any packet hitting [...] Ok. Great. Then does this mean, $IPTABLES -A INPUT -p tcp -s 0/0 -d $STATIC_IP --dport 21 -j ACCEPT $IPTABLES -P INPUT DROP that all connection except to port 21 of external ip are not allowed. Also should default rule be kept first or last as I have done below? Or does it not matter in my case? Thanks a lot for the explanation and bye. With warm regards, -Payal -- "Visit GNU/Linux Success Stories" http://payal.staticky.com Guest-Book Section Updated.