I can't help but remember when "someone" wrote an ipfw rule compiler - ie, take ipfw ruleset, generate C code. Maybe someone should write one and open source it this time.. :) Adrian