Replying to myself... For the record: the firewall-logs in question are ipTABLES, not ipCHAINS as said by me in my original mail. Thanks. - paul -- To UNSUBSCRIBE, email to questions-request at logreport.org with a subject of "unsubscribe". Trouble? Send an email with subject "help" to questions-request at logreport.org