My firewall is being hit by a number of different IP addresses (with one exception). Those looking for port 1 are from source port 761 and those destined for port 137 are from source ports 1036 -1039 The one exception to the list of ips is 216.237.207.101 who has hit port 1 from port 761. I think this one might be a cracker or script kiddy. Buck -- Psyche-list mailing list Psyche-list@redhat.com https://listman.redhat.com/mailman/listinfo/psyche-list