also, be sure to move SSH off of port 22 I went from thousands of script-kiddies per day down to zero. Now I can see anything interesting in the log [ /var/log/authlog ] without the slightest effort (haven't seen anything at all in months) Pick some high number port not used by anything else Chris