In-Reply-To: <[EMAIL PROTECTED]> Thanks for all the notes everyone. I don't know how to check if ports are being probed on Linux: The access attempts are almost all via smbd/nmbd when I have it on line: That is, failed logon attempts recorded in the samba log. In the past there also used to be a majority of logon attempts via xinetd until I got fed up and switched xinetd off entirely. I also get attempts to logon via SSHD (one IP address in Hong Kong spent 15 minutes trying). Thanks ! Jon
