william at elan.net said: > So I'm wondering what are others doing on this regard? One of the more effective ways to deal with this would be to request that upstream(s) null-route your aggregate until the attack subsides. --Tk