And the confusion sets in... If you are blocking UDP and TCP for things that shouldn't leave your network then why would that have no effect? For example, if you want to run a proxy only shop then you might right a rule that says no port 80 out traffic is allowed except from host x forcing clients to use the proxy. Same holds true for socks, etc... It's very practical and used in many places. My full time job is working for a major bank and that's exactly what we do. Gary Wayne Smith -----Original Message----- From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of ASHISH Sent: Sunday, January 16, 2005 8:26 PM To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: Re: ever block *outgoing* packets on your firewall? It will have no effect on tcp traffic, but it can be a real mess with udp traffic.