Hi all, It seems the answer is to use ipchains and not rely on tcpd. Many thanks for all the advice. As a short-term solution, I've dpkg -r'ed telnetd and the client now has Teraterm SSH on the LAN. Best regards, Patrick Kirk Mobile: 0044 (0) 705 004 9046