On Sunday 2006-January-08 15:44, bright true wrote: > iptables -I INPUT -s 1.2.3.4 -j DROP > > but seems to be it doesn't kill the active connections , it works > only for new incoming connections I suspect we have an issue of INPUT vs. FORWARD misunderstanding here. See "man iptables" and the description of the filter table and its built-in chains. -- mail to this address is discarded unless "/dev/rob0" or "not-spam" is in Subject: header