I don't see why that wouldn't work. :) Of course I was thinking... hosts.deny-- ALL: ALL host.allow-- ALL: .domain.org Mentally, I know that everything is denied. Period. Then I can add back what I want. -- Scott Stancil sstancil at geekrooms.com