regarding hosts.allow/deny do you want mostly open or mostly closed system? if mostly closed (recommended if newbie) in hosts.deny ALL:ALL ALL:PARANOID in hosts.allow use the format service : host : action so you could use in.telnetd : *.somedomain.com : spawn "cat /dev/random > /dev/console" dont know about the x thing Nick