Hi, I have found some unofficial tutorial on looknstop, which mentions that in looknstop, the 'source' always means 'Local machine', while 'Destination' always means 'remote machine'. Is this right? The reason I ask this question is that in the enhanced ruleset, there are 2 ICMP rules (request and respond). For 'request', the 'Source" is localhost, while for 'respond', the "Destination' becomes localhost. So, in this case, the first statement on the source and destination must be wrong. My understand is: source means 'sending' , destination means 'receiving'. Am I right?