Carey, I'm not an authority, but as far as I know, this kind of usage comes from unauthorized servers. The way you stop unauthorized servers dead in their tracks is to set your firewall so your only servers that can hit the Internet are on port 21 (ssh). And if you don't ssh into your Linux box, then set your firewall to block port 21 also. SteveT Steve Litt http://444domains.com