At 09:01 12/01/2006, you wrote: > > IP inspect is not adding entries to the appropriate access list. > >123T changed that, they do not get added to the access list anymore. Oh. Right. That would explain a lot of things. Would also stop me tearing my hear out. Anyone got a pointer to some documentation explaining this? B.