In reply to Kenn Humborg's flatulent wordings, > Ipfwadm is your friend. Man ipfw and ipfwadm More so IPChains if you're a 2.2.x kernel user