After reading about sick puppy, then his detractors, then his supporter, then his detractor, then his <his detractor> detractor. I'm moved to ask, 'can't we all just get along?' How about we talk about a new intrusion strategy. I'll start by asking how much interest does the group see in proactive strategies that allow a rule base to take action when someone misbehaveson a system? Thanks. Kevin Capt Kevin Ziese Chief, Countermeasures evelopment