> Hmm; I wonder if it's possible to tell tcpd to rate-limit a particular > service? Easy, use the "twist" option to run a second-level wrapper instead of the regular daemon. The second-level wrapper creates a lock file with its PID, runs the real daemon, and removes the lockfile N seconds later. No daemon is run when the lock file specifies the PID of an existing process. Don't put the lock in a world-writable directory. Wietse