it could be necessary if say ... you want to block programs from calling home, you can block outgoing to that ip address. you could also block any outgoing trojan horses, etc. -----Original Message----- From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-bounces@xxxxxxxxxxxxxxxxxxx]On Behalf Of seberino@xxxxxxxxxxxxxxx Sent: Friday, January 14, 2005 3:02 PM To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: ever block *outgoing* packets on your firewall? I'm wondering if it is ever necessary to block *outgoing* packets at your firewall. As long as you block /incoming/ carefully no hacker on the Internet can send spam through a node on your network or anything nasty like that right? (I'm wondering for a wifi hotspot if any nastiness will happen if I don't block outgoing. I block virtually all incoming except ssh.) CS