First thing is first I want to set up all the Policys so that by default they DROP. I did that. For some reason as soon as I set FORWARD to DROP I no longer have INTERNET! If I leave it as ACCEPT it works Another thing is how do I get Apache to work? the only way it will is if I set all thePolicies to ACCEPT. Also if I set OUTPUT to DROP I loose SSH capability. This is what I have set in order for it to work. Is there something I am missing here in order for all these to be set to DROP to work properly? Chain INPUT (policy DROP) target prot opt source destination LOG all -- anywhere anywhere LOG level warning ACCEPT all -- muldersworld advancewarning.net Chain FORWARD (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination Thanks! Mike