> The only thing that comes to mind is that 168.79.113.141 might be getting in > under the "--state RELATED" rule if you had an outgoing connection to that IP > it would possibly be able to get back in. Heh, webserver hacked? >> iptables -A INPUT -s 0/0 --protocol tcp --destination-port 80 -j ACCEPT Jan Engelhardt -- | Alphagate Systems, http://alphagate.hopto.org/