The passwd file was dated 7/12, and that's the date I installed apache2 and php. I set up a tester web server with PHP installed on that very date.

I've been getting the latest apt-get about once every two weeks. Maybe I need to be a little more vigilant about that.

I'll take a look at snort, and I'll get the rest of the list from my "hacker" co-worker. I'd like for this system to be pretty "hard", if it can be.

Glen Ausitn