We got the following after upgrading to 7.0R2.7: system { ... tcp-ack-rst-syn; ## Warning: 'tcp-ack-rst-syn' is deprecated tcp-ack-rst-syn used to be a hidden command. Does this mean that it is now default in 7.0R2.7? Steinar Haug, Nethelp consulting, sthaug at nethelp.no