At 10:37 PM +0200 6/12/07, Sjoerd Mullender wrote: ... >Note that the reject rule is before the new entry (I added a file with a >single line >-A RH-Firewall-1-INPUT -s 192.168.244.0/255.255.255.0 -i vmnet8 -j ACCEPT >) ... Try using I instead of A. Also file a bug that the "reject" rule on the end should be treated specially. There should be rules that go first, then custom rules, then any rules that go last. -- ____________________________________________________________________ TonyN.:' <mailto:tonynelson@xxxxxxxxxxxxxxxxx> ' <http://www.georgeanelson.com/>