Yes, i believe thats correct. I have this working example. Their are also some more reject examples, i used to have a copy but i lost it. Try google for more icmp reject types. -- snip from 72.creon, haha ---- $IPTABLES -A INPUT -p icmp --icmp-type 8 -d $MYIP -s 0/0 -j REJECT --reject-with icmp-net-unreachable -- snip from 72.creon, haha ---- -- - Louie Miranda http://www.axishift.com ----- Original Message ----- From: "cc" <cc@xxxxxxxx> To: "Netfilter Group" <netfilter@xxxxxxxxxxxxxxxxxxx> Sent: Monday, September 29, 2003 2:15 PM Subject: icmp echo requests