that's really nice info. I will read them. thanks.
Consider switching to ipset-s or null routes, both have a lower overhead than plain rules.Ipset-s also have the benefit of supporting expiration (timeout).
-- Jeff Pang jeffp...@aol.com _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop