>what about entering a new rule, immediately before the one saying > >-dport 80 -m state --state NEW -j ACCEPT > >the new one would be > >-dport 80 -m state --state NEW -j DROP -j REJECT is preferred here, otherwise users wait almost forever. I have used it in the past and works fine (i.e. lets established ones go on) Jan Engelhardt --
