Although linux was one of the first to support IPv6 it seems to me that netfilter support has almost stuck. There is still not even a REJECT target not to mention stateful filtering for IPv6. Tom -- T h o m a s Z e h e t b a u e r ( TZ251 ) PGP encrypted mail preferred - KeyID 96FFCB89 finger thomasz@hostmaster.org for key The horizon of many people is a circle with a radius of zero. They call this their point of view.