Thanks -- more good suggestions for the documentation and the defaults for the script... --Steve Bellovin, http://www.research.att.com/~smb (me) http://www.wilyhacker.com (2nd edition of "Firewalls" book)