> trusted! That seems too permissive to me. Am I still not understanding > trusted_networks correctly?
Yup. Those are on the other side of an *un*trusted network, so they don't count. Trusted networks determine where the trust stops. It doesn't (so far as I know) restart after that. Loren