Hi, I'm trying to dropping all UDP packets from specific address but it still has higher CPU usages. anyone has ideas for this issues ? here's example A --+---> F B --+ C --+ A/B/C sending massive UDP packets to F, also it has address dropping rules fro A/B/C. Yes, it is works fine. But if i see the CPU usages of 'F' some of cases it is using more than 20-30% when its(A/B/C) sending 100M to F. is there any best way to decreasing the CPU usage of the 'F' ? thanks in advance. Cheers. P.S : 1. INPUT filter dropping very higher CPU usages 2. TARPIT and prestate PREROUTING dropping less higher but not satisfied. - To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html