Nobody port the network DOS attack patch that was just committed to FreeBSD-5's ip_icmp.c. It has some severe flaws that are better handled in a different way. -Matt