SIDR should in the end make this easier to automate. Once your customers have certs that cover the range of addresses they are allocated they can announce those address ranges as valid sources to the other ISP securely similarly to the way they can anounce they want those address ranges routed to them. BCP 38 can be securely automated if we are willing to spend engineering effort to achieve it. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka@xxxxxxx