Are: ipchains -A output -i eth0 -p tcp -s ${INIP} 1024:65535 -d 0/0 telnet -j ACCEPT -y ipchains -A output -i eth0 -p tcp -s ${INIP} 1024:65535 -d 0/0 telnet -j ACCEPT ! -y
and: ipchains -A output -i eth0 -p tcp -s ${INIP} 1024:65535 -d 0/0 telnet -j ACCEPT the same thing? Thanks, John BTW, if ACK != FIN, they are not. -- John Conover Tel. 408.370.2688 [EMAIL PROTECTED] 631 Lamont Ct. Cel. 408.772.7733 http://www.johncon.com/ Campbell, CA 95008 Fax. 408.379.9602