thanks to Hal Burgiss and Bret Hughes for response. I am encouraged from Hal's experience that the midentd probably not needed. FYI, here is the beginning of the README in the mindentd-1.6 dir from the downloaded tar file from http://ipchains.nerdherd.org [byers@byers midentd-1.6]$ pwd /data/home/byers/dfirewall1.7/ipchains-firewall-1.7/midentd-1.6 [byers@byers midentd-1.6]$ ls CHANGES install.sh midentd.logcycle LICENSE midentd midentd.mircusers README midentd.conf midentdconfig [byers@byers midentd-1.6]$ cat README midentd v1.6 05-17-1999 (c) Peter van Dijk, [EMAIL PROTECTED] http://p8ur.op.het.net/midentd/ [This program is under GPL] midentd is an identd replacement with masquerading support. With your average identd on a masquerading firewall, if an ident request comes in for a masqueraded connection, it will return 'ERROR : NO-USER' or something along those lines. This may be quite irritating at times, with, for example, IRC servers that won't let you in if they don't get a valid ident reply. This program tries to fix that. When a request comes in, it checks it in /proc/net/tcp first, just like any regular identd will do. If it can't find the connection there, it looks in /proc/net/ip_masquerade and tries to find it there. If it does, it will connect to the client that owns the connection and ask the midentd there (yes, the client needs it too..) which user owns that connection. Jack ________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com -- To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe" as the Subject.