I am considering switching to L'n'S from Kerio Personal Firewall 2.1.5. I would appreciate info re whether L'n'S can do two things that kpf cannot do, i.e., 1. Conceal the OS (and its version) running, and 2. Conceal the type and version of browser employed. In addition, a highly desirable feature would be the user's ability to incorporate several IP addresses/IP address ranges into IP address groups and use the latter in writing firewall rules so as to avoid repeating a rule for each IP address/IP address range of interest. Kpf 2.1.5 allows the definition of one IP address group only and this is far too little for me. Thanks.