Hi, after the chain "user_fw" is set up within the script /sbin/init.d/firewall there is one line I can't understand: $IPCHAINS -A user_fw -s 0/0 -d 0/0 $ACC_FLAG -j ACCEPT Doesen't this line mean I accept everything from any source and forward it to any destination? Does this rule make sense? Why should I accept everything after just having granted access to only some special hosts/ports? Is there a security hole? Thanks for you help Fabian