Hi all, i wish any one help me on filtering syn-flood for the forward packets. as i have used iptables with limit: $IPTABLES -N syn-flood $IPTABLES -A FORWARD -p tcp --syn -j syn-flood $IPTABLES -A syn-flood -m limit --limit 1/s --limit-burst 4 -j RETURN $IPTABLES -A syn-flood -j DROP i have faced problem with surfing when there are lots of subscribers. when i increased limit rule then again it gives problem during less no. of subscribers. Could any one help me out from this sort of problem. Any help will be apprieciated. Rgrds, John __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com