If you have MAX3k/4k/6k and you want to block the port 8888 from going outside your WAN, do the following Ethernet> Filter> any namew > out filter > forward=No Src Mask=0.0.0.0 Src Address=0.0.0.0 Dst Mask=0.0.0.0 Dst Address=0.0.0.0 Protocol=6 and add the filter number to Ethernet> Connections > your connection> Session-option> data-filter= filter-number Then you should bring down the connection and up for the filter to take effect. Best Regards, Ahmad El-Hakim Salec Egypt -------------- next part -------------- An HTML attachment was scrubbed... URL: http://shadowknight.real-time.com/pipermail/rte-ascend/attachments/20010225/17d53c89/attachment.html