Steve (et. al.), Has there been any talk of adding context (or another discriminator) to the exclude capability? I know we discussed this a while back but wanted to check again. I would really like to be able to have a rule which says ignore all AVCs from subjects of type foo_bar_t. LCB -- LC (Lenny) Bruzenak