A secure VPN would probably be a better time investiment, as it would be safer than naked TSIG anyway, and solve any issues you could have with other management protocols and applications as well. -- "One disk to rule them all, One disk to find them. One disk to bring them all and in the darkness grind them. In the Land of Redmond where the shadows lie." -- The Silicon Valley Tarot Henrique Holschuh