> i m also doing so but there is the problem of some programs > that some times use dynamic ports like msn messenger uses > dynamic ports for file transfer through it (i think so if it > is wrong then tell me please) ad where the log will go and > can i specify any file instead of the one default AFAIK MSN likes to connect to port 1863/tcp by default (it does here) and if that failes it will try to connect to some servers on port 80/tcp. So, if you ACCEPT connections for both ports 80/tcp and 1863/tcp you should be fine. Although some MSN functions like file-transfer might not work. Gr, Rob