hi, is this normal: the outgoing port is switching or is this an port scanner? 10.1.2.1 is the surfing machine and 10.1.1.1 is the gateway with proxy. Oct 9 22:31:00 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.2.1:1061 10.1.1.1:3128 L=48 S=0x00 I= Oct 9 22:31:01 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.2.1:1062 10.1.1.1:3128 L=48 S=0x00 I= Oct 9 22:31:01 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.2.1:1063 10.1.1.1:3128 L=48 S=0x00 I= Oct 9 22:31:01 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.2.1:1064 10.1.1.1:3128 L=48 S=0x00 I= Oct 9 22:31:02 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.2.1:1065 10.1.1.1:3128 L=48 S=0x00 I= Oct 9 22:31:10 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.2.1:1066 10.1.1.1:3128 L=48 S=0x00 I= Oct 9 22:31:42 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.1.2:876 10.1.1.1:22 L=60 S=0x00 I=360 Oct 9 22:33:31 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.1.2:785 10.1.1.1:22 L=60 S=0x00 I=404 Oct 9 22:37:37 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.1.2:1247 10.1.1.1:3128 L=60 S=0x00 I= Oct 9 22:37:38 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.1.2:1248 10.1.1.1:3128 L=60 S=0x00 I= Oct 9 22:37:39 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.1.2:1249 10.1.1.1:3128 L=60 S=0x00 I= Oct 9 22:37:39 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.1.2:1250 10.1.1.1:3128 L=60 S=0x00 I= Oct 9 22:37:39 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.1.2:1251 10.1.1.1:3128 L=60 S=0x00 I= Oct 9 22:37:39 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.1.2:1252 10.1.1.1:3128 L=60 S=0x00 I= Oct 9 22:37:39 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.1.2:1253 10.1.1.1:3128 L=60 S=0x00 I= Oct 9 22:37:39 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.1.2:1254 10.1.1.1:3128 L=60 S=0x00 I= Oct 9 22:37:46 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.1.2:1255 10.1.1.1:3128 L=60 S=0x00 I= Oct 9 22:38:06 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.1.2:1256 10.1.1.1:3128 L=60 S=0x00 I= Oct 9 22:47:29 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.1.2:1272 10.1.1.1:3128 L=60 S=0x00 I= Oct 9 22:47:29 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.1.2:1273 10.1.1.1:3128 L=60 S=0x00 I= Oct 9 22:47:29 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.1.2:1274 10.1.1.1:3128 L=60 S=0x00 I= Oct 9 22:47:30 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.1.2:1275 10.1.1.1:3128 L=60 S=0x00 I= Oct 9 22:47:31 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.1.2:1276 10.1.1.1:3128 L=60 S=0x00 I= Oct 9 22:47:32 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 10.1.1.2:1277 10.1.1.1:3128 L=60 S=0x00 I= regard's -- _______________________________ Wolfgang Schaefer Diplom-Ingenieur (FH) Elektronik System- und Netzwerkadministrator Fon +49(7308)818-22 Fax +49(7308)818-65 busse design ulm gmbh Nersinger Str. 18 89275 Elchingen / Ulm, Germany http://www.busse-design-ulm.de _______________________________