I've sshd running, with RSA authentication and I use fail2ban. I don't think anyone can get in. But very often I find in auth.log messages like these: Oct 24 23:55:33 HS10 sshd[306]: reverse mapping checking getaddrinfo for 1111-31-1.customhostingservers.com failed - POSSIBLE BREAKIN ATTEMPT! What does it mean ? Regards, Joachim Smit __________________________________ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com