Andrew Ayre wrote: Who is UID 64020 and 64011? Are those users reserved for the qmail processes or are they actual users on the box? I'm leaning towards a form handler that is getting abused. -- Jon