Did they find some new venerability in ssh just recently? Half of my clients firewalls had port scan type probes on only port 22. One hit each from about 6 different sites. All last nite. The ones that were scanned were on two different ISP's and 3 different subnets. Thanks Phil -- Phil Schilling GCS Tech phils at gcstech.net