I am using a linux system as a firewall. I got contacted by bellsouth saying that my ip address was being used to scan ports of some hospital in france. They wanted to let me know about these occurances and told me to do something about it. Well, I'm not doing this, so somebody else is. IS there anything I can do, or anything I can look for?

What services (daemons) are you running? I remember running into something similar years ago with my sysadmin at work, who came to me complaining about some Linux machine on the network - some daemon I had running was scanning the network. I can't remember what it was off the top of my head, but maybe if you give me the list of what you're running, it will come to me (or someone else). BTW, what distribution are you using?

I beleive its version 7.1 or something like that, its new at all and I am not realy sure which deamons I am running, is there an easy way to tell? Right now Its pretty much just a Firewall. It is however setup to accept a VPN connection.

sorry, I am running version 6.2.3

Sorry, Linux 6.2.3 is not the distribution. Are you running Redhat? Mandrake? Suse? I (or someone else) may be able to help you better if you knew a little more about this system. For instance, you might run "redhat-config-services" (or "ntsysv") if running Redhat or "mcc" on Mandrake to see what services you are running. A "ps aux" might help see what's running (or "top"). Do you know what firewall you are using? Has this machine been compromised and is being used by someone else to hack into machines in France? Maybe you should find the individual that set this computer up and/or watch the network traffic to/fro (using something such as "iptraf"). Good luck.

I suggest you change all of your user's passwords to unguessable passwords. Most likely if your computer is doing something it shouldn't, its because someone made it do it (such as over ssh or telnet if you have it enabled)