> P2P tools receive many small packets from everywhere. Those many packets > clog the connection and need to be throttled BEFORE they cross the > bottleneck of your uplink. (I'm aware that's not really possible on a > standard DSL connection) I did say that he needs to rate-limit SYN segments. Those inbound packets are generated in response to an outbound SYN. Stop the SYN and you stop the inbound traffic. He's NAT'ing, so there are no inbound connections to worry about.