> Using iptables, how to I REJECT pings and traceroutes to the box > itself? iptables -A INPUT -i eth0 -p icmp -j DROP you can change the input device. You can probably be more specific, but this is a good way to ignore your box getting hit. If you want to protect the inside of your firewall: iptables -A FORWARD -i eth0 -p icmp -j DROP Rob