>maybe u just need to drop first line...and the end of your rules
>just block all packets in and out
>like
>block in all on le0
>block out all on le0
>
>after that no ping and tracerute ....silence:) from outside:)

Eh, that would be going in the wrong direction :)  I _want_ people to be
able to connect to the system remotly, the problem is that I can't
connect locally to the system.

-Sean