Sorry to keep pestering but I''m afraid that I published the web page before it was ready. The page now shows a correct first example plus a second example that demonstrates the flexibility of the new scheme. -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net