Hi, is this correct or is there a better possibility? filter f_LCP-Echo { match("pppd") and match("EchoRe");}; filter f_not_LCP-Echo { not match("pppd") or not match("EchoRe");}; wkr Thomas Richter -- dss1://49.431.801306 Wot're we going to do tonight, Brain ? gsm://49.179.5192431 The same thing we do every night, Pinky . icq://124849926 Try to TAKE OVER THE WORLD ! mailto:richter@thomas-richter.de http://www.thomas-richter.de