Jeff, >It is generally a better overall move for us to spend the few >minutes it takes to hunt down the squatter and kick them from the >network via port block. OK, I am still missing something here. You have also said off-list that "there's basically no good way to fix it in the short run", which does not fit with your statement above that the fix only takes a "few minutes". So which is it? Thanks again, -- dkm