This might be in the stupid question department: Is it a good idea to tell ipchains to block the Windows Netbios protocol from going out on the Internet? If so, then if I setup a VPN to do Windows shares, will I be able still be able to via the VPN, or will I need to reopen the firewall to Netbios traffic. Thinking out loud... Richard