I'm running sendmail/imap/horde/imp/mysql on one PC. I'm looking to secure this PC as much as I can. Via a netstat -anp, I've noticed that mysql is listening on port 3306. Is it possible to use ipchains to only allow localhost source address access to this port? Mark Orenstein