Charles Lindsey wrote: > that does mean you need to be able to say 'unknown'. Interesting, now I finally understand the purpose of "unknown", it allows to override a parent strict SSP without a global t=s affecting all subdomains. Frank