I don't actually know: Guidance would be great! Sure, can you post output of `testparm -s` (feel free to redact domain names).