i did it with a little function. i create a session from a timestamp. then i create a small funtion that creates a futur timestamp. and checks the timestamps, as long as the first is still smaller than the other all is fine and then sets the session to the actual timestamp. you can do this in sa rules, too. session logintime > futurtime goto logout. Denis