Then what should I use for /hosts.deny /hosts.allow? I set it up as per the example in the manpage for hosts_access... I /do/ see your point on the only allowing sshd access though... -- Unix has had thirty years of highly-skilled techical types demanding basic functionality from the OS. Mac's have had 20 years of interface nazi's tweaking every facet of the OS. Microsoft has had... the Windows marketing department.