Hi, >> deny=0.0.0.0/0.0.0.0 >> permit=XXX.XXX.X.X/29 >> permit=192.168.1.0/24 > > Are you sure your provider *always* sends data from this /29? I'm sure, yes. Its a MPLS net, only voice inside. Regards, Georg