Alexis <alexis@xxxxxxxxxxxx> wrote: > That 192.168.20.60 is trying to connect to 209.225.0.6 is obviuos, by > the lenght and the syn looks like a get. > > Have you checked if that box (168.20.60) has any virus or anything > like this?? > The box is running Postfix and Apache. All incoming mail is scanned by Antivir. Several other checks are running. I found nothing strange til now. -- Andreas Meyer | http://www.anup.de | http://homeservice.anup.de/andreas