Hello; Hopefully this is the right list to post this question, after looking at NetLabel, in dmesg I couldn't help but see: [ 0.570655] NetLabel: Initializing [ 0.570660] NetLabel: domain hash size = 128 [ 0.570663] NetLabel: protocols = UNLABELED CIPSOv4 [ 0.570730] NetLabel: unlabeled traffic allowed by default "unlabeled traffic allowed by default." is this similar to selinux (handle_unkown=deny, if so is there an option to change this to "unlabeled traffic deny." Also is there a location for this in the kernel i.g. /proc/sys/net/* regards; -- Justin P. Mattock -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.