On Sat, 2003-04-05 at 18:32, Dene Ulmschneider wrote: > > I have noticed that since the RH9 system was installed and running that I > am seeing FTP connection in my logs. > Throughout the day yesterday, the RH9 system made 136 FTP connections to my > RHL 7.3 system and I have no idea why. I did not setup anything that would > do this. This is *NOT* standard practice at all. Are you sure there is not a cron job running anywhere? Are you sure this boxed wasn't hacked *before* you installed redhat 9.0? Try removing the following programs: ftp, ncftp lftp (if installed), at least if any programs are trying to use these they will stop. Mark