Hello Jim, Thanks Jim! I'll try this. Ona more question... It's hard to me (os I'm just dumb?) to understand "This filter applies to" thing... What should be there if I want to apply things described in that rule to my office computers? Tuesday, February 19, 2002, 17:39:10, you wrote: JH> http://www.ISAserver.org JH> Hi Dennis, JH> 1. Protocol rules shouldn't include the "Server" variations; they don't help JH> 2. The packet filters should look something like: JH> "SMTP" JH> TCP JH> Outbound JH> remote port 25 JH> local port any JH> "POP3" JH> TCP JH> Outbound JH> remote port 110 JH> local port any JH> "DNS Q" JH> UDP JH> Send-Receive JH> remote port 53 JH> local port any JH> ..not sure what the "1080" port is for; though it's usually either a web JH> proxy or SOCKS. JH> Jim Harrison -- Best regards, Dennis V. Kleymeonov System administrator Skytec Agency, Moscow, Russia 9 (bldg. 1), Pluschiha str., Moscow, Russia, 119121 Tel.: (7095) 248-2931, (7095) 248-3754 Fax: (7095) 248-3754 mailto:klim@xxxxxxxxx