Hmmmmm, I wonder if it should be just '--source' here (as in the source ip address / mask) ? Wonder if that was a typo, anyways ... > iptables -A INPUT -p 4 --source-port 10.10.10.1 -i eth0 -j ACCEPT Maiko