On Fri, 24 Aug 2001, Thomas T. Veldhouse wrote: > That is, some of the block belongs to XO communications -- in particular, > its DSL users :) Don't discount spoofed IP addresses. One thing I noticed when dinking around with IPchains is that in an SMTP request, the requests may originate from port 25 but communicate on a different (unreserved) port number. I wonder if it's a 5cr1pt k1dd13 just trying to exploit sendmail. Just a thought. -Brian oh yeah, and trim your posts ppl :-)