Nice. Thanks. > restrict 10.169.0.0 mask 255.0.0.0 > restrict 10.169.0.0/8 Slightly strange example. I'd expect 10.0.0.0 mask 255.0.0.0 == 10.0.0.0/8 or 10.169.0.0 mask 255.255.0.0 == 10.169.0.0/16 Should that generate an error message? -- These are my opinions. I hate spam.