This guy seems to like logcheck :) http://www.debian-administration.org/articles/278 The second part actually makes a pretty good logcheck howto... -- Todd Troxell http://rapidpacket.com/~xtat