> all that's needed, the second rule doesn't do anything Huh ? Yes it does, it *only* allows messages from that domain, not queries, presence, ... cheers, Remko