Is there any way of filtering on sender IP#? For example: If I want to minimise the impact on the router from illicit admin-connections (TCP-syn-flood) by blocking certain IP#, on line card level, from connecting to the router. In hope of guidence Mikael Carlander rip at kth.se