Hello, 3 to 5 times a week I've found these entries in my syslog on our firewall: Sep 8 17:42:47 snoopy named[22437]: bad referral (net !< EXODUS.net) Sep 8 17:42:47 snoopy last message repeated 11 times I know these errors are not important, but what I don't understand is that there must be a connection to or from exodus.net but I can't find any connection to this domain neither mail nor http. These messages somtimes appears in the middle of the night where nobody is working in our company. Would it be possible that one of our internal servers attempted to make a connection to exodus.net? Is there a known exploit I don't know? How can I track down the problem? -- Holger Will GL Medientechnik Südwestdeutsche Rollenoffset GmbH Plieninger Str. 150 D-70567 Stuttgart Tel.: +49 711 72008 167 http://www.suedwestrolle.de Fax.: +49 711 72008 175 http://is.suedwestrolle.de