Paul, For voice communication ensure that outgoing TCP connections from port 6901 are enabled. Also enable UDP packets where either the source or the destination port is 6901. I don't all those udp ports need to be opened, so I'd close those and try these. You shouldn't have any problems. For chatting, enable outgoing tcp connections to TCP port 1863. Note this will only allow voice/chatting on msn. If you want file transfers, you'd then have to enable both incoming and outgoing TCP connections to 6891-6900 range of TCP ports. This enables each sender to send 10 files at a time. Just openeing port 6891 will allow each user one send connection. Hope this helps Tim Rainier UNIX/Linux Systems Administrator, Kalsec INC. (269) 349-9711 Xtn: 3354 trainier@kalsec.com "Paul Kozlenko" <pkozlenko@rogers.com> 10/13/2002 02:59 PM To: <suse-security@suse.com> cc: Subject: [suse-security] IPTABLES firewall - Windows Messenger (voice) All, I have my SuSE firewall box set up and it works fine. Except one function I haven't figured out. An internal uses wishes to use MSN Messenger - (voice chat). Micrsoft's web site mentions that UDP ports 5005-65535 are required to reach the internal machine. I believe this is set up properly in my POLICY rules. Still no luck. Does anyone have any suggestions? Paul -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here