Justin, I understand and share your concern. Unfortunately I cannot tell you since I have no idea what you use. In our case, we test them with unrealistic loads (all ports running ttcp) which is much more than a typical user will ever do. Adding such a filter is quite minimal in our case since our algorithms are pretty tight. Pat R. Calhoun e-mail: pcalhoun@usr.com Project Engineer - Lan Access R&D phone: (847) 933-5181 US Robotics Access Corp. ______________________________ Reply Separator _________________________________ Subject: Re: Re[2]: SYN floods (was: does history repeat itself?) Author: "Justin W. Newton" <justin@erols.com> at Internet Date: 9/9/96 3:30 PM At 01:19 PM 9/9/96 -0500, Pat Calhoun wrote:

Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Content-Description: cc:Mail note part

Perry,

This is actually quite simple to implement on Dial Access Routers, and obviously this is the best place to add the filtering.

How much spare processor do a lot of the dial access servers have left on them? I am somewhat concerned about the amount of processor left on my dial access servers. Justin Newton Internet Architect Erol's Internet Services