> > route 0.0.0.0/0 discard; > > Sorry, "route 0.0.0.0/0 reject" is more correctly. We use: route 0.0.0.0/0 { discard; no-install; } Steinar Haug, Nethelp consulting, sthaug at nethelp.no