Hi. That's a typical MTA machine: emilio:~ # lsof -i COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME inetd 154 root 4u IPv4 38091 TCP *:pop3 (LISTEN) sshd 181 root 3u IPv4 82 TCP *:ssh (LISTEN) syslogd 14030 root 10u IPv4 27318 UDP *:syslog sendmail 16965 root 4u IPv4 65606 TCP *:smtp (LISTEN) sendmail 16965 root 5u IPv4 65607 TCP *:submission (LISTEN) emilio:~ # grep submission /etc/services submission 587/tcp # Submission submission 587/udp # Submission It permits users send or receive mail. Admin tasks are made through ssh and some logs are sent via syslog. Why is sendmail opening "submission" port??? What is it intended for? Is it insecure??? Could I close it? How? Regards. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= ** RoMaN SoFt / LLFB ** roman@madrid.com http://pagina.de/romansoft ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~