> > Indeed. For instance SYN-flood the BGP port. > > Won't work easily. > On Criscos, the queue is per peer, not per port.. Spoof the source address to that of a peer. In fact I'd have thought anything out of sequence would generate an RST and clear the session. Hmmm.. fragile world we live in. Alex Bligh Xara Networks