>Here's a very readable article on statefull packet filtering >which is now available on firewalls in the new 2.4 kernal >for linux: > http://securityportal.com/cover/coverstory20010122.html