You might want to replace the call filter on the P75 with the following. It only passes TCP traffic, and DNS traffic, except when the source port is 137 (`DNS for WINs resolution'). In filter 01...Valid=Yes In filter 01...Type=Generic In filter 01...Generic...Forward=No Out filter 01...Valid=Yes Out filter 01...Type=IP Out filter 01...Ip...Forward=Yes Out filter 01...Ip...Protocol=17 Out filter 01...Ip...Src Port Cmp=Neq Out filter 01...Ip...Src Port #=137 Out filter 01...Ip...Dst Port Cmp=Eql Out filter 01...Ip...Dst Port #=53 Out filter 02...Valid=Yes Out filter 02...Type=IP Out filter 02...Ip...Forward=Yes Out filter 02...Ip...Protocol=6 -- Michiel Boland <boland@diva.nl> Digital Valley Internet Professionals Duivendaal 4, Wageningen, The Netherlands Phone: +31 317 465555, Fax: +31 317 460276 ++ Ascend Users Mailing List ++ To unsubscribe: send unsubscribe to ascend-users-request@bungi.com To get FAQ'd: <<A HREF="http://www.nealis.net/ascend/faq">http://www.nealis.net/ascend/faq</A>> </PRE> <!--X-MsgBody-End--> <!--X-Follow-Ups--> <!--X-Follow-Ups-End--> <!--X-References--> <HR> <STRONG>References</STRONG>: <UL> <LI><STRONG><A HREF="msg11248.html">(ASCEND) P75/Win95/Monitoring Prgm.</A></STRONG></LI> <UL> <LI><EM>From</EM>: Steve Brown <lt4z51@xsite.net></LI> </UL> </UL> <!--X-References-End--> <!--X-BotPNI--> <HR> <UL> <LI>Prev by Date: <STRONG><A HREF="msg11284.html">(ASCEND) Secure Access Firewall,</A></STRONG> </LI> <LI>Next by Date: <STRONG><A HREF="msg11282.html">Re: (ASCEND) 5.0Ap36 release notes</A></STRONG> </LI> <LI>Prev by thread: <STRONG><A HREF="msg11248.html">(ASCEND) P75/Win95/Monitoring Prgm.</A></STRONG> </LI> <LI>Next by thread: <STRONG><A HREF="msg11255.html">(ASCEND) PPP vs MP - Win95 Dialup user</A></STRONG> </LI> <LI>Index(es): <UL> <LI><A HREF="maillist.html#11283"><STRONG>Main</STRONG></A></LI> <LI><A HREF="thrd261.html#11283"><STRONG>Thread</STRONG></A></LI> </UL> </LI> </UL> <!--X-BotPNI-End--> <!--X-User-Footer--> <!--X-User-Footer-End--> </BODY> </HTML>