Hi, this is my first time using SUSE Firewall (SF) on 10.1 version. since i got many error using webmin with iptables and shorewall module then i decide to use SUSE Firewall trought Yast. SF work fine, all client can access to internet since i enable MASQUERADING. But now i need to know how to: - block POP service - block certain IP Below is my current config: In the External Zone: Service to allow = IPsec In the Internal Zone: Service to allow = DNS, HTTP, Remote Admin and Samba Server Protect firewall from Internal Zone is = Checked But why my client can access POP Service? __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com