>u mean blocking the MAC address also doesnot do any good. hmm i >thought iptables is that powerful. There is a reason it's called _IP_tables. What iptables can do for you is block *IP* packets with certain MAC addresses. Jan Engelhardt -- | Alphagate Systems, http://alphagate.hopto.org/