ipchains -> iptables -> nftables. I wonder how many other new routing languages I'll have to learn before I finally turn in my cards? Now, having said that, after hiding under a desk with my fingers in my ears singing "nah nah nah" I wrote my first set of nftables rules today. It turns out not to be as arcane as it looks. Still, change is inevitable. Brad