All- Is there a way to define a rule to combine the following lines: -A INPUT -s xxx.xxx.xxx.xxx -d yyy.yyy.yyy.yyy -j DROP -A INPUT -s zzz.zzz.zzz.zzz -d yyy.yyy.yyy.yyy -j DROP ... something like -A INPUT -s xxx.xxx.xxx.xxx -s zzz.zzz.zzz.zzz -d yyy.yyy.yyy.yyy -j DROP or even -A INPUT -s xxx.xxx.xxx.xxx -s zzz.zzz.zzz.zzz -j DROP which would match a packet from xxx.xxx.xxx.xxx OR zzz.zzz.zzz.zzz to yyy.yyy.yyy.yyy... Thanks! Carl - -- "There are 10 types of people in the world: Those who understand binary and those that don't."