I have 2 LAN PC's behind an ADSL Router. I want to be able to allow PC1 to access the file shares on PC2 but I do NOT want PC2 to access the file shares on PC1 This sounds easy but I cannot seem to get my head round bi-directional rules. If I only allow PC1 to PC2 using PC>>Internet the reply packets are dropped and therefore access from PC1 to PC2 is not available. If I allow PC1 to PC2 using PC>>Internet>>PC then not only can PC1 access PC2 but PC2 can also access PC1. When using the bi-directional rule the headings on Source and Destination are confusing - does it matter when using a bi-directional rule which IP addresses go in where as they both seem to mean the same on bi-directional rules. TIA Richard.