hi list, i've seen those messages in my auth.log and really dont know where to classify them. The messages are inside a jail, base system is clear of those.. [snip] Mar 19 13:44:37 hamlet login: 2 LOGIN FAILURES ON ttypb Mar 19 13:44:37 hamlet login: 2 LOGIN FAILURES ON ttypb, 78419s4 Mar 19 13:44:51 hamlet login: 2 LOGIN FAILURES ON ttypb Mar 19 13:44:51 hamlet login: 2 LOGIN FAILURES ON ttypb, exit [snap] opinions are appreciated. greets benny -- /"\ ASCII RIBBON CAMPAIGN | Benjamin von Mossner \ / AGAINST HTML MAIL | benny@vonmossner.de X / \ multiple exclamation marks are a sure sign of a diseased mind