Is there any particular reason why the packets dropped by my zone alarm firewall are now not showing reverse dns lookups in large numbers when they did so previously. The ports involved seem to be those for well known worms that used to provide the dns lookup for the ip address but over the last few weeks or so, the reverse dns column has just gone mostly blank! Thanks again for any replies.