On 25/02/2014 17:22, Staudinger, Malcolm wrote: > Why wouldn't you just block chargen entirely? While we're at it, why not just block everything except for tcp port 80 and dns? Isn't that the only legitimate traffic on the interweb these days? Nick