As TIS passes _nothing_ except what travels through it's application level proxies, NFS on the inside is completely isolated. Novell and anything else is trapped on the inside too. -john