I built a script that puts spammer IPs in the firewall for a few days. I noticed this morning in the firewall log that spam connect attempts seem to come in "quanta" of 9 tries (9, 18, 27...). Some don't, but by far most do -- or did yesterday, anyway. Anybody know why? -- Glenn English ghe at slsware.com