[snip] > > You do have a rule for established connections? > > > Kevin Kinsey > DaleCo S.P. > > you know the only rule i have for that is add 60000 deny log tcp from any to any established I am assuming this is incorrect?