Chris Ball wrote: > Wouldn't putting a rule in IPtables be the best way round? Depends if you wanted to tell the denied user they are denied or not. -- Jon Farmer Systems Programmer Entanet International Ltd GPG Fingerprint ABCB 6E92 59B8 001F FE9C 0817 A2D6 0151 FF49 9040