<snip> I have some trouble with new kind of flood targeted at proxy server. One hosts creates thousands of new connections. Is there a way to protect against that at squid level? I would like to avoid doing it with netfilter, because it is hard to guess acceptable limit of connections (browsers tend to open many of them when viewing one page with many pictures, flash, java applets and so on). <snip> Just a thought...although this is not a squid solution, why not limit the rate at which connections are made with iptables? Nolan