Thanks for all the replies. One (Mark) suggests scponly, which I came across myself in the meantime. It seems to be the sort of approach that may be simplest to set up. I'll do some investigation and testing and summarize my success (or lack thereof) sometime in the next couple of weeks. Cheers, JN