@F00F: Norton might be stupid and assume that anything that access that specific port is the trojan. iptables -A INPUT -p tcp –dport 60000 --tcp-flags RST RST -j DROP Should work better. thanks F00F! whoops…copy/pasted the wrong stuff and didn't think much about what was in that line, wasn't really sure what a couple of those commands were anyhow. like i said i don't use terminal/command line often, hardly ever, and don't remember much from when i did use it. sorry Chris4u19. iptables -A INPUT -p tcp --dport 60000 --tcp-flags RST RST -j DROP ya...lol, that should work better without all the extra garbage i posted. :lol: i thought exactly the same thing about norton because as soon as Chris tried to use port 60000, it sent an alert. i really hope this works for you Chris4u19.