Alex,I'd like to follow-up and try to tie together all the good responses you've received about your PIX 501.First, a few things about the PIX firewall. While some of the commands on the PIX are related to Cisco IOS commands, these are really differ...

See below...vrs

That's really interesting!!I'm running IOS 12.3(7)T7 and I get the exact same result when I type in the identical list...I experimented with some additional hosts and subnets and discovered that the router seems to want to keep the hosts listed above...