HiHo! > > $ipt -A INPUT -i $iface -d $network -p tcp --tcp-flags SYN,FIN SYN, FIN > > -j DROP Maybe this is a no-brainer. But if you have copied the above from a script you may fail to notice that this rule will throw an error. The space between the second SYN, and FIN is wrong. If the above is just a typo in this mail, than forget this reply :) ciao markus
