I have received a number of reports of light-weight Bourne Shell derivatives (ash, dash, ...) in popular distributions that don''t have support for XOR. While using XOR results in much cleaner code, there is only one place in the latest Shorewall Snapshot where XOR is used. I have therefore decided to remove the requirement for XOR even though it results in some rather hackish code. -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://www.shorewall.net Washington USA \ teastep@shorewall.net