Ok, so thank's for all your answers ... it's working now ... ... but today something strange is happend ... the host tried to make a connection to an unknown IP on port 137 ( UDP ) ... why that ? ... usually Port 137 ( UDP ) is : netbios-ns 137/tcp # NETBIOS Name Service netbios-ns 137/udp # NETBIOS Name Service ... here the log-entry : Nov 28 12:26:22 linux-box kernel: OPEN: 192.168.10.60 -> 213.6.48.154 UDP, port:137 -> 137 ... anybody an idea ??? should I deny any connections from host to internet on this port ??? Mit freundlichen Grüßen Bruno Leonhardt CLP Domino R5 Systemadministrator ________________________________________________________________________________________________________ AnalyTek Systemhaus Hospitalstr. 2a D-65589 Hadamar Tel.: 06433/81403-15 Fax : 06433/81403-40