> Is there an easy way to block spoofed IPs on the nas, or just use an > access-list on group-async? uRPF ("ip verify unicast reverse-path"). Requires CEF. oli