Thank you very much, SpOonWiZaRd. I've already setup two policies: one to allow (me and my other machines) and one to deny (all of their MAC addresses). And I was very surprised that neither rule worked. I'll go over that again more carefully. Wireless is always disabled; I don't use it. I'll try DNAT and get back to you. And I'll get ubuntu. Any idea how they are getting my IP address? Wouldn't they need that to keep connecting? Without a rootkit or something sending them a signal, would it be stupid to presume that my ISP is providing it to them? Wouldn't surprise me at all. More later. Thanks again, buddy. Really appreciate it.