Came across this PTR record in my CanIt trap: 207.210.255.231 resolves to fin-231.findersource.net.255.210.207.in-addr.arpa. Kosher? Something to filter on?? --- In the time it took to read this a Windows exploit was discovered. William Brown Web Development & Messaging Services Technology Services, WNYRIC, Erie 1 BOCES (716)821-7285