Hi, I'n a newbie on this site and I can't say I am well versed with networking issues - just enuff 2 get me arnd. I have a cyber cafe which I own & maintain technically. The problem is that of late the net has bn waaay slow at times (sporadic), and my ISP seems 2 have no answer coz they say the network looks fine from their viewpoint. I have a Red Hat box and have set high security on the firewall - and i'm using Proport (not eXtreme) to check the performance on individual machines. Sometimes as Proport is running I see on the 'Traffic Monitor' tab some 2 established connections with the same remote IP: 127.0.0.1, while the remote hostname is obviously localhost. The beef is that whenever I see this on any of my surfing comps (all WinXP boxes) the access speed for that comp goes way down. When I kill the lower 'localhost' connection listed (they always come in pairs) the net behaves again. If I try to kill the upper-listed connection, nothing happens. Second (smaller) issue is that i'm trying to get any software that blocks outgoing connections from trojans or something like that as well - since WinXP only blocks incoming (i think). Which is the best? Any help for these two problems? I'd be xtremely grateful!!