I noticed a lot of failed connections on our firewall from the inside. Further investigation showed some of our servers (2003, 2008) which are in an 10.x.x.x range were attempting to connect to 192.16.x.x on various ports. I used netstat -b on one of the servers that was trying to connect and I see this: Proto Local Address Foreign Address State PID TCP ourserver:1510 192.168.1.67:epmap SYN_SENT 816 RpcSs [svchost.exe]Why would an RpcSs be trying to connect to an address range we dont even use. There is no 192.168.x.x anywhere on our network. Any ideas? Elijah Landreth

Anyone?Elijah Landreth