Paul, If I install blackhole routing like this, will I SYN bomb myself if I get lots of incoming packets from these addresses and can't respond to them? Would I be better of to filter all INCOMING packets FROM these networks inbound to my network? -Dorn