> Just when I think I've achieved ultimate pefection on this, someone > comes along with a great idea. Thanks! ... > action = iptables-multiport[name=smtppop3imap, > port="smtp,pop3,imap", protocol=tcp] Can I suggest the name "mail" would summarise the stack of items above? Did you test this - is it correct? Cheers Ed W