Hi, I've always used A), with the assumption that the less data is being copied, the better for performance. I also find it easier to debug. The only advanage of B) I can see is that it may be easier to make a mistake in A) scenario - such as accepting X-Forwarded-For from external IPs. Andrzej Godziuk