> i would be equally surprised > if ACLs with any setting of the wildcard bits your heart desires > didn't work. Like I said, I broke a PIX a couple of years ago with a discontiguous mask (ok, wildcard bit specification) in an ACL. The bug was fixed in a later release. David ...