I am not sure on how to send it, but with respect to the ISOM idea, I would not do it. Apparently most of the packages get screened and you don't want your friend to get into trouble. Maybe someone with experience can chime it.