Hello freebsd-isp! I'd like to ask, is there any packet using kernel module for rejecting p2p traffic by packet matching?? Snort isn't an option for me, because it very overloads system at high traffic and it's very slow. I'm thinking about something for netgraph subsystem. -- Greetings, KrzychK2