Yes, and they are by default enabled (said so in my first response).
OK. I just did some figuring over a ten minute period, and now it looks as though the TCP_DENIED count represents 58.8% of the total HTTP requests made during that period. The other TCP_* counts represent 41.2% of the total. Do these percentages sound "better"? Or more in line with the "norm"? Chris -- Chris Nighswonger Network & Systems Director Foundations Bible College & Seminary www.foundations.edu www.fbcradio.org