I think that the best solution would be for the script to construct a single iptables command string and then run it. -- John Hasler jhasler@newsguy.com Elmwood, WI USA