Although i think andy's config is correct, there are dozens of ways to do an access list. NOYPI, without a diplay of the messages, we are unable to see what went wrong with that list, so lets do it the hard way. this should get it for sure..... as long as you are positive this is the internet...