> If you want to have a full-on layered permissions scheme (where the action applies to the smallest containing subnet) you could store a more complicated hash... You could also use a Patricia trie to find the smallest matching network. See http://search.cpan.org/~plonka/Net-Patricia-1.014/ -- Matt