hi list, when i check #tcpdump -n -i eth0, even though im not browsing in can see none stopping lines for ... arp who-has xxx.xxx.xxx.xxx tell xxx.xxx.xxx.x . . . . howto stop this with iptables, yep I know tcpdump shows packets before "iptables" do, and also like to undertand why so many arp is generating on our network ? regards -- I love deadlines. I like the whooshing sound they make as they fly by. Douglas Adams