Well that clears it up, thanks for the clarification. Well, that leaves me with a possible play with whitelisting ip addresses. I was living in the belief that nobody would guess usernames, well, I was wrong :) Everything explained, you can close the topic.