Im pretty sure I read something about this being a feature in the latest p-o-m. You can allow a rule to match if the time is XX:XX-XX:XX. Yeah, Time of Day support is in at least the latest iptables. Jason www.cyborgworkshop.com ...and the geek shall inherit the earth...