I have a bunch of schools getting clobbered with the latest greatest virus. Several are using IPCop and Shorewall. What would be a good rule to stop all workstations from being able to send out anything destined for port 25 except to the mail server at 10.100.100.6? Simply put, I want workstations to utilize the local mail server but not be able to send mail to any other server. Most schools are running two interfaces on their firewall. Thanks in advance Raymond _______________________________________________ TCLUG Mailing List - Minneapolis/St. Paul, Minnesota http://www.mn-linux.org tclug-list at mn-linux.org https://mailman.real-time.com/mailman/listinfo/tclug-list