Friday, April 30, 2004 11:41 PM Rotariu Bogdan > lol, he just spoofed his addresses so the list can't see the real ips. That's what I thought at first too, but in all his tcp dumps too? I tend to do a lot of creative editing when posting, but that's just way too overboard. Besides, considering he's experiencing what appears to be a routing issue, we wouldn't be able to give very effective help if he did edit that data. Eric Diamond eDiamond Networking & Security 303-246-9555 eric@xxxxxxxxxxxx