On my systems I try to close any many ports as possible without realising a firewall !! While examing all open ports I found at least three ports which are difficult to close: port service damon 515 printer lpd 1024 unknown ??? 6000 X11 xdm Then I've heard from someone on this list, that there's a possibility to close X11 while using the parameter "-nolisten tcp". This works fine and now port 6000 is closed. While I'm looking for the other ports I restarted the XDM process and so port 1024 changed into another one (1032, 1447, 1452) with different service-names (iad3, apri-lm, gtegsc-lm). Then I stop the XDM process and these funny processes were gone !! When start XDM again, there will be another port with another service-name !! Do you now what happen there ?? I tried it on another machine too and there I've got the following ports: 1024 unknown (after bootup) 1352 video-aktivman 1401 goldleaf-licman I'm not sure if this a security-problem or not ?! I hope that somebody can help me. Bye Holger