] Has anybody found an approach which avoids this effect? Sure, create two access-lists. One is production, one is for modification. You can then rotate between the two when changes need to be made. The bonus prize is that a rollback to a known working ACL is easily done. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);