Hmm... My hair is in danger zone, I keep so much pulling at it... So, the policy logics are really hairy, and most recently simple IP-address comparing looked impossible at nic.funet.fi, which kept rejecting valid MX hosted target domains. ... but now that too is under control. The bleeding-edge version is available at: ftp://mea.tmt.tele.fi/ /Matti Aarnio