Hello One and All, I am sure this might be an easy answer for someone. Could you please enlighten me ? I am using the rule below to drop any inbound connections into my .0.3 Class which by default allows any Outbound connections. Plus if the connection is already established than those outside connections are ok as well. iptables -A INPUT -d 192.168.3.0/24 -m state --state NEW -j DROP However I am now using a router that doesn't support the -m state --state NEW rule.(crappy GUI thing) :-( Could someone please tell me another way using iptables to drop any new inbound connections but allow everything else outbound and the established connection replys to get back into the .0.3 Class ? What is the most secure/easiest way ? Many Thanks for your help ! Kind Regards Sylvan -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html