i don't understand why in packet filtering howto they say to protect ping of death with a icmp match limit or i believed that the ping of death was a no conform icmp packet problem _________________________________________ Communicate with others using Lycos Mail for FREE! http://mail.lycos.com/ -- To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org