> Secondly, what is the best way to circumvent this flaw? > > Does the 2.4.3 kernel fix it; because I noted that there were a couple > of new modules in it for iptables? this was reported (by me) to the kernel-source maintainer and he has applied the patches to the latest version. Ivan -- ---------------- Ivan E. Moore II rkrusty@tdyc.com http://snowcrash.tdyc.com GPG KeyID=90BCE0DD GPG Fingerprint=F2FC 69FD 0DA0 4FB8 225E 27B6 7645 8141 90BC E0DD