I've switched to VNET (love it) in jails. Neat, you an have ipfw running in your jail! I added some log lines to test it out and was a bit confused when /var/log/security wasn't showing the log lines. Turns out, the kernel is grabbing them and logging in the host and not the chrooted environment. Bug? Feature? :) Rudy