Here's a very readable article on statefull packet filtering which is now available on firewalls in the new 2.4 kernal for linux: http://securityportal.com/cover/coverstory20010122.html Ted