Is their anything for ARC filters equivelent to: access-list 101 permit tcp any any established or do you have to parse the entire access list for each packet? Also, am I correct in saying something like this: access-list 101 permit tcp any 208.206.76.57 0.0.0.0 eq 20 would get broken into two lines on an ARC filter, like this: 010 AND tcp-dst-port = 20; 020 PERMIT dst-addr = 208.206.76.57/32; you can't do it on one line, it takes 2 right? Thanks ----------------------------------------------------- Brian Feeny (BF304) signal@shreve.net 318-222-2638 x 109 http://www.shreve.net/~signal Network Administrator ShreveNet Inc. (ASN 11881) - To unsubscribe to usr-tc, send an email to "majordomo@xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.