In message <email@example.com> you write: > > If the kernel's table is too full to add to the conn track table, > > it should go "oh well" and continue on instead of completely > > breaking the network. It does, modulo any bugs. The overload code (with the syn flood patch) seems to work quite well. Rusty. -- Hacking time.