BSD/OS 3.x users. ----------------- First, you will need to either: (a) have a source license for the kernel so you can patch some files or (b) obtain the relevant pre-compiled .o files (I can't supply these yet). The files which you will need patched are: ip_input.c, ip_output.c (maybe in_proto.c and ioconf.c.i386 too - NOT sure). First, you need to build IP Filter. Do this from the "ip_fil3.2.x" directory with the command "make bsdos". If this completes successfully, install the various bits and pieces with "make install-bsd". Prior to starting, it is a good idea for you to know what your kernel config file is (it appears that the script guesses incorrectly at present). Once you have that in mind, run the 'kinstall' script in the BSDOS3 directory. This will attempt to patch a bunch of files. If you've obtained the relevant .o files, ignore the errors, otherwise please report them to me and mention which version of BSD/OS you are using and on what platform (Sparc, i386, etc). It will also go and install all the IP Filter .c and .h files where they can be find when it comes time to build the kernel. The script will then pause and ask you for your kernel configuration file. After you enter this, it will add "options IPFILTER" to your kernel configuration file. IF YOU WANT TO DO LOGGING, ADD "options IPFILTER_LOG" to your kernel configuration file NOW! Now that you've got your kernel configuration file done, use config to setup a new kernel build and complete with make. When the kernel rebuilt is complete, put it into / and reboot with your new kernel. If IP Filter has been configured into your kernel correctly, you will see a message like this when your system boots: IP Filter: initialized. Default = pass all, Logging = enabled Upon logging in, the IP Filter commands ipfstat, et al, should all function properly. Darren