On Fri, Apr 23, 2004 at 10:21:26AM +0200, Joris wrote: > Anyone can easily tie up all available connection slots for an > ftp/web/... server using just idle connections. > Limiting the amount of connections would block that. The connlimit patch appears to offer what you seek. You'll probably have to patch your kernel with sources from patch-o-matic to use it though.