Can you explain to me how to use payload based rules ? for example like the following . . . 1) in a connection find the string 123456 and replace it with 654321 2) Block all inbound on port 80, but if the string open80 is typed into a open port using telnet then that string open80 should trigger a rule that allows inbound to port 80 from that IP . . I think these two things can be done, but they make it look sooo complicated.. Thanks guys If you can help me understand how to do those 2 things, then i will be able to figure out how to use the whole thing.