intrusion detection

[Eric]

> typical automated brute force port scan (80-web; 137-windows netbios
> name svc; 22 - ssh; 23 - telnet; 110 - pop3; 25 - smtp; 1080, 8080 - web
> proxies; 79 - finger), no connects/conversations. If you're not getting
> at least one of these a day, you're not really connect to the 'net. ;-)

Thanks to all!  I guess I'm not surfing :>  I have all services blocked, so
I'm not used to people knowing I knowing I "exist" or being able to perceive
my presence.  Foolhardy maybe...