Ive discovered that in this instance, the traffic in question was comming from an ad banner that was being dished out on port 8000, and one of my users inadvertently came across a site linking to this ad banner ( I think it was Alta Vista). I called the company responsible for the ad banner and asked the programmer what kind of CRACK he was smoking *LAUGH* He thanked me and said he would be moving the ad banner over to port 80. I told him thanks....now I will have to add his domain to my black hole list... :C) Marc.. - [To unsubscribe, send mail to [EMAIL PROTECTED] with "unsubscribe firewalls" in the body of the message.]
