I often find myself doing, whois some.damned.ip.address and then copying and pasting the address range for the miscreant in question, and doing, shorewall iprange x.x.x.x-y.y.y.y with the aim to drop the entire range. My one minor complaint is that I often have to edit out the spaces between the hyphen when copying and pasting the address range returned by whois. I tweaked the shorewall script to avoid this by changing the iprange case to this, iprange) [ x$2 = x ] && usage 1 shift ip_range "$*" ;; this works with shorewall 1.4.8. BTW, thanks for a freakin'' amazingly useful firewall configurator. steeve -- Steeve McCauley steeve@oneguycoding.com :wq http://oneguycoding.com Please don''t lie to me, unless youre absolutely sure Ill never find out the truth. - Ashleigh Brilliant