hey here is quick question let suppose i drop MSN with the below rule #iptables -A FORWARD -p tcp --dport 1863 -j DROP but its not enough, if 1863 is blocked it tries to use port 80. any work around ? regards -- (after bouncing head on desk for days trying to get mine working, I'll make your life a little easier)