Tomas, that suggests your RH9 machine may be compromised unless it routes port 80 to the server that was compromised. It is also a good idea to keep up with security updates via "yum update". {o.o} ----- Original Message ----- From: "Tomas Larsson" <ktl@xxxxxxxxxx> > OK, FEDORA Core 3, HTTPD Ver 2.??? The one shiped on the CORE 3 ISOs. > Everything els as it was shipped on the core3 ISOs. > The box sits behind a RH9 Box, acting as router and firewall using gShield > IP-Tables script, The server is nated, No DMZ.. > The firewall is stealth, nothing incoming allowed except port 80 and port > 443. everything else is dropped. > > > > With best regards > > Tomas Larsson > Sweden > > Verus Amicus Est Tamquam Alter Idem