AFAIK, iptables can use some 'layer 2' information such as MAC Address for doing some filtering in some tables, but it CANT be used for filtering those 'layer 2' packets. That means iptables CANNOT modify ARP/RARP behavior. Sincerily, Leonardo Rodrigues ----- Original Message ----- From: "Thomas Preissler" <tomjohn@xxxxxx> To: "netfilter-user Mailinglist" <netfilter@xxxxxxxxxxxxxxxxxxx> Sent: Sunday, November 30, 2003 3:12 PM Subject: How to make a computer invisible > Hello folks, > > how do I really make a computer totally invisibly as it would be > when it does not exist? > > It is clear, that the simplest solution is to DROP all incoming > packets, but what's about (R)ARP packets? Can they be blocked anyway? >