Thanks Nick. Yes, it looks like mod_security provides dynamic collections that I could use to match header parameters against a whitelist and change that list on demand (for example by hitting defined URL address). Does Ironbee provide any similar functionality? Daniel --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx