On Tue, Aug 03, 2004 at 09:49:55PM +0100, D. D. Brierton wrote: > On Tue, 2004-08-03 at 19:41, Jack Bowling wrote: > > > There are netfilter add-on "match" modules that enable your firewall to > > work with p2p protocols such as H323/Gnomemeeting. This is your best > > option. > > Thanks, Jack. That sounds interesting. netfilter is part of the kernel > isn't it? Sort of a companion to iptables? Where would one find these > add-on modules? Netfilter is the kernel level framework for packet manipulation, etc. beginning with kernel 2.4. Iptables is the user level set of programs that allow you to set up "tables" that determine which packets get in or out of your box. For all theing to do with netfilter/iptables, head over to: http:://www.netfilter.org A cruise through the various tutorials in the Documentation section there is worthwhile. -- Jack Bowling mailto: jbinpg@xxxxxxx