> Has there been any desision for a TCP syslog port, as 514 is taken? I'm always disabling rshell (IIRC this service uses 514), so I usually use 514. You could use a non-privileged port in the >1024 range. -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt