The default BLOCK_SERVICE setting for DenyHosts is sshd. However, I'm finding many of the IP addresses blocked area not only trying to log in to the server, but are also mail spammer's IP addresses. Would it be better to set the default to all instead of sshd? Or is there a reason why it would not be good? Thanks in advance Tom