Christopher Fowler wrote: [snip] > Is there a way I can say > on the server that any packet destined for 10.0.5.0/24 going out of eth0 > to be rejected automatically? These packets would be generated > internally. iptables -I OUTPUT -o eth0 -d 10.0.5.0/24 -j REJECT perhaps? -- JK