> Source address verification at access layer and rate limiting icmp would > be fine starts. > Why would you like to regulate my ability to transmit and receive data using ECHO and ECHO_REPLY packets? Why they are considered harmful? I´m all for source address verification though. Pete