Want to have the option to stop all ports (especially those above 1024) responding to any deliberate attempts to establish a connection, except from approved external IP addresses. At the moment ports are responding.

Any ideas?

/viz

_________________
Mac G5 2.5, XP, Linux (Debian), Cisco 837: C837 Software (C837-K9O3SY6-M), Version 12.3(2)XC2. Cisco newbie! Be gentle

On what? A cisco router? A PIX firewall? A workstation?

If you're using a cisco router you can use an ACL. Create a list to allow what you want, and then the implicit deny any on the end will filter the rest.