If you "man spamd" or "netstat -an", you'll notice that it listens by default on 127.0.0.1:783.
The log entries would presumably represent the tcp connections made from spamc to spamd. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 12, 2004 9:50 AM To: users@spamassassin.apache.org Subject: local host Watching the maillogs with SA 2.6 each call of spamd comes with this: Oct 12 09:47:24 mail spamd[15997]: connection from localhost.localdomain [127.0.0.1] at port 51225 and the following call the port increments upward. What is this?