HI, If you are setting the INPUT, OUTPUT and FORWARD chain policies to DROP, is there any reason to also set the PREROUTING, POSTROUTING and OUTPUT nat and mangle policies to drop as well? -- Sincerely, Phil Martinez J. River, Inc.