Is there no way to shape incoming traffic? With any kernel version, or even by rewriting the networking code? I understand the difficulties, and the reasons why outgoing shaping is simple at the low-level but incoming shaping is not done even at the high-level, but what about this? Use the TCP window field to restrict the rate of data transfer (not worrying about the details right now; just the general feasibility). (This is for a single box, rather than for a box on a network which has a separate router to shape its traffic.) If a node were to consistently violate the window, it could be blocked until the administrator fixed the problem at that node. (This is intended for thsoe who do not intend to violate the policies of the server, rather than those who may wish to do so maliciously.) I'd just like some pointers and hints for this...it seems workable to me. But if there is another way, or *any* way, I'd rather pursue that before the TCP way so I can see which is better. I'm simply discouraged by the fact that no one seems to have tried this before, while it seems a painfully obvious way to do it to me, so I wonder what I'm missing conceptually.