Hello Glenn, [cut] > > Good luck, but still I confess that I *may be* switching to > this your > > suggestion too! ;-) > > Use default deny and break up the logic into chains (within > reason). Makes things a lot easier to maintain. Did for me, anyway. glad to share some thoughts... We will eventually re-discuss issues on this list ;-) Regards, Flavio Boniforti PIRAMIDE INFORMATICA SAGL Via Ballerini 21 6600 Locarno Switzerland Phone: +41 91 751 68 81 Fax: +41 91 751 69 14 URL: http://www.piramide.ch E-mail: flavio@xxxxxxxxxxx