Andreas Baetz wrote:

according to the manual and to my tests it [stateful inspection] not only works for tcp, but also for udp and icmp (for what else, I don't know)

Thanks, Andreas. I shall overhaul my personal iptables script and add state checking to the rules dealing with UDP / ICMP based services. I thought that stateful inspection was available for TCP only, but it is good to know I made a mistake in assuming so. Mit freundlichen Grüssen / Regards Dipl. Inform. Ralph Seichter ISC Informatik Service & Consulting GmbH Tel +49 2241 867-0 mailto:r.seichter@isc-inf.com Fax +49 2241 867-222 http://www.isc-inf.com/