Hi Mark,

>> Native blocking support inside BBBS(D) would be better,

> absolutely...

I use bbbs' inet.bbb file to limit some IP addresses' access to specific
ports - when troublemakers come around.

You can use this file under BBBS to do so:

[inet.bbb]

!HTTP 
!telnet 

Where ! says that protocol may not be use by 

This doesn't interfere with binkp mailer functions so if that  wants to just deliver mail via binkp, there is no problem
AFAIK.  He/she could not however deliver via telnet or HTTP given the
above.  If he did, he'd be bounced and hopefully this would cause him to
contact me to discuss the problem 

>> but with firewall config you can do it right now, without waiting for
>> update.

>in some cases... i don't see folks replacing their existing firewall solutions
> with shorewall or similar, though... i know we won't be doing that over here
>because our's is highly customized... then again, it is the perimeter firewall
> for three active networks ;)

True, I've always used iptables over here.  Works for me.

Take care,
Janis

--- BBBS/Li6 v4.10 Toy-3