nothing
the log shows some
Xmas port scan attack from [ip] detected
it doesn't come up often..
no one is using the internet.. the connection is idle but WAN is blinking and sucking up my bandwidth
edit: hmm, i checked the statistics page and it seems to be receiving packets much more than sending them