Hi all, Okay, this is somewhat security related. I have a couple of questions. First, I have a need to monitor users for idle time and log out anyone who is away from the system after a set period of time (say 30 minutes). I though of using idled, but it appears that idled must be able to see the listing from "w" or some command like that to check a user's idle time. So, my setup is SuSE v7.3 using GNOME and GDM. However, the Session scripts that call sessreg do not seem to get the Xsessions to log to wtmp. Will idled still work properly? Is there better documentation that that provided in /usr/share/doc/packages/idled ? Or, does anyone have a suggestion on how I can monitor Xsessions and subsequently log out sessions that have been idle too long? One caveat that may, or may not, affect this is that I am running the Xsessions on an ltsp setup. So, the workstations are diskless Xclients. However, I do w on the server, and see nothing. I did test this on a SuSE v7.3 box that is not diskless, and got the same result: a blank listing in "w" for the currently running (logged in) XWindows session on tty7. So, suggestions? The second question has to do with iptables and transparent proxying with Squid. I have followed the directions at squid-cache.org and from the netfilter mailing list, but I cannot get things to work. When a browser is told to use a proxy, what do the packets coming from it really look like in the headers? Are the packets addressed to the squid boxes address at port 3128 (or whatever port you run squid on), or are they pointed at the external address. I think it goes to the internal squid box address with the packet payload containing the actual desired systems url. So, once the squid/iptables box receives the packet, how does it handle sending it out to the outside server via squid. Does this request originate from the squid boxes loopback address, or from it's external address? Obviously I'm still quite confused by how things work. thanks for any help. geoffrey -- ******************************************* This space intentionally left non-blank *******************************************