Hey Martin - is the address that is spoofed - one of your allocations - cuz you can inbound filter internal addresses and apply the acl to the HSSI's on your 7500 series (if that is what is being spoofed) -- I am nothing if not net-Q! - ras at poppa.clubrich.tiac.net