@Gentlemen, I rest my case. Sorry I have to be a bit blunt here. IMHO, You all have run or designed networks from devices point of view where Open Source/Free Software existed as a pure free-pluggable solutions designed by some morons who were looking to fund their projects through free use and public use, thus probably the most strong and primary reason why we are unable to sustain 99.99% up times on our KE networks. When the devices hang up or freeze or even have problems, the entire networks are brought down, no one has a clue except to google quickly for some patches, re-install or even worse let the situation exist until some hours have passed. If you are up to packeeter levels and beyond, then lets take this further, else please leave it as it is as we will just keep going in circles. :-) @Tusker, In the context that I saw you as the pedestrian crossing the street while a speeding car is around the corner, I'm really very sorry that I have to let the car hit you as I cannot save you from what's going to happen on your network. I really wish you would take my advice, rules in a useless firewall are not going to help you. For a start, ask plenty of the pirates on this list who have nothing better to do than champion for Open and Free Software , how they spoof IP addresses or use encryption so as not to get listed on various detection systems out there. I wish I worked for Anti-Piracy or some dictatorial regime , there would have been such a nice and terrible online war. :-) Am done and some thots. Best Rgds and nice evening. Cheers.