What is the following log info. It looks like some kind of combined ICMP and DNS ? Feb 29 10:02:03 WFx-SH kernel: DROP-OUT:IN= OUT=eth0 SRC=192.168.1.2 DST=212.54.64.171 LEN=198 TOS=0x00 PREC=0xC0 TTL=64 ID=30626 PROTO=ICMP TYPE=3 CODE=3 [SRC=212.54.64.171 DST=192.168.1.2 LEN=170 TOS=0x00 PREC=0x40 TTL=59 ID=53582 PROTO=UDP SPT=53 DPT=59554 LEN=150 ] ------------------------------------------------- Bo Jacobsen