I'm sure FreeBSD is vulnerable. http://www.us-cert.gov/cas/techalerts/TA04-111A.html There's a draft that (sort of) addresses this. Should we adopt it? draft-ietf-tcpm-tcpsecure-00.txt Alan.