Hello Alan, > not really - did you read what I wrote? How can you do a state check > on what is a stateless protocol? I think you can still do state checks for UDP: http://www.sns.ias.edu/~jns/wp/2006/01/12/iptables-connection-tracking-udp/ Best Regards, George