Sounds like you might have the KAOS TROJAN on your kids' computer.  Port 1212 is suposed to be used for LUPA (whatever that is) but KAOS TROJAN uses it too.  Here is a link.

http://www.dark-e.com/archive/trojans/kaos/11/index.shtml


----------------------------------------------------
> An internal NMAP scan on my home network showed my kids' computer having
> port 1212 open and assigned to a service named "lupa".  My current
> ipchains/masquerade settings block that port.
> 
> Does anybody know what "lupa" is?
> 
> Mahalo,
> Nelson
> 
> 
> 
> ---
> You are currently subscribed to luau as: dusty@sandust.com
> To unsubscribe send a blank email to $subst('Email.Unsub')