Hi, This may be the wrong place to post this but I didn't see a tcpserver/ucspi-tcp list. If there's a better place to post please let me know and forgive. I'm wondering if and how you can booby trap a tcprules deny rule like you can with tcpd. With tcpd for instance you can have hosts.allow allow what you want then hosts.deny has a rule: ALL: ALL: spawn (echo Attempt from %h %a to %d at `date` | tee -a /usr/adm/tcp.deny.log | mail -s "NETWORK DENY--myserver" [EMAIL PROTECTED]) & which lets me know immediately if someone has tried something naughty. From the docs I get the impression it can be done but I'm pretty stupid and can't figure out how. TIA Bill