that's true but i read boxes, so i think maybe he are mading a small network IF not the case we have to construct with INPUT and OUTPUT the last sentence of the drop general are good? i don't remeber exactly because i use /etc/sysconfig/iptables to my rules!!!!!