Try this one instead: access-list 101 deny ip any 0.0.0.0 252.0.0.0 access-list 101 deny ip any 255.255.255.128 0.0.0.127 access-list 101 deny ip 10.0.0.0 0.255.255.255 255.0.0.0 0.255.255.255 access-list 101 deny ip 127.0.0.0 0.255.255.255 255.0.0.0 0.255.255.255 access-list 101 deny ip 128.0.0.0 0.0.255.255 255.255.0.0 0.0.255.255 access-list 101 deny ip 172.16.0.0 0.15.255.255 255.240.0.0 0.15.255.255 access-list 101 deny ip 191.255.0.0 0.0.255.255 255.255.0.0 0.0.255.255 access-list 101 deny ip 192.0.2.0 0.0.0.255 255.255.255.0 0.0.0.255 access-list 101 deny ip 192.168.0.0 0.0.255.255 255.255.0.0 0.0.255.255 access-list 101 deny ip 223.255.255.0 0.0.0.255 255.255.255.0 0.0.0.255 access-list 101 deny ip 224.0.0.0 31.255.255.255 224.0.0.0 31.255.255.255 access-list 101 deny ip 192.41.177.0 0.0.0.255 255.255.255.0 0.0.0.255 access-list 101 deny ip 198.32.136.0 0.0.0.255 255.255.255.0 0.0.0.255 access-list 101 deny ip 198.32.146.0 0.0.0.255 255.255.255.0 0.0.0.255 access-list 101 deny ip 198.32.134.0 0.0.0.255 255.255.255.0 0.0.0.255 access-list 101 deny ip 198.32.158.0 0.0.0.255 255.255.255.0 0.0.0.255 access-list 101 deny ip 198.32.176.0 0.0.0.255 255.255.255.0 0.0.0.255 access-list 101 deny ip 198.32.184.0 0.0.0.255 255.255.255.0 0.0.0.255 access-list 101 deny ip 192.157.69.0 0.0.0.255 255.255.255.0 0.0.0.255 access-list 101 deny ip 198.32.128.0 0.0.0.255 255.255.255.0 0.0.0.255 access-list 101 deny ip 198.32.140.0 0.0.0.255 255.255.255.0 0.0.0.255 access-list 101 deny ip 198.32.130.0 0.0.0.255 255.255.255.0 0.0.0.255 access-list 101 permit ip any any -Steve -- +--------------------------------------------------------+ | Steve Carter scarter@genuity.net | | GENUITY Inc. Phone: (602) 308 2386 | +--------------------------------------------------------+ | "I used to think that the brain was the most wonderful | | organ in my body. Then I realized who was telling me | | this." -- Emo Phillips | +--------------------------------------------------------+