Hi list, that's a pretty good idea. the only thing I am worried about because of my old pc ( ;-( ) is that these log-watchers may slow done the system a little bit. What about the following: edit /ect/hosts.allow and invoke a scirpt everytime the ssh deamon, or what ever protocoll you like, gets acitve to check (eg.: with who or last -n 2 or ....) to see if the loggin was successfull. should look like: sshd: IP : spawn script-whos-there and the script-whos-there should include the mail -s user-XXXX-logged-in I know this may take a few if-then loops but should work... The major drawback currently is that I do not know if hosts.allow allows the use of=20 wildcards for the ip's.=20 This solution worked quiet fine at home-net.... anyway, let me know if that solved your problem / how you solved it.... cu, markus __________________________________________________________ Mit WEB.DE FreePhone mit hoechster Qualitaet ab 0 Ct./Min. weltweit telefonieren! http://freephone.web.de/?mc=021201