Just a quick question: Does ipfw or dummynet have an option to rate limit the amount of syn packets sent to the same destination address, and port number in say 10 second period? Or is net.inet.tcp_syncookies enough protection in the case of a syn flood. Gardner Bell