Greetings: If my firewall receives a packet from 1.2.3.4, which rule accepts it? -A INPUT -s 1.2.3.4 -j ACCEPT -A INPUT -s 1.2.3.4 -m state --state NEW -j ACCEPT -A INPUT -s 1.2.3.4 -p TCP --syn -j ACCEPT Does it matter if the packet is the first of a new connection? Are these lines redundant in the sense they will all allow a first connection packet through? Are rules #2 and #3 the same? Regards, PH ++++++++++++ Padraig Houlahan IT Manager Lowell Observatory Flagstaff, AZ 928-774-3358 x 214