d> Routers are good at NAT but for firewalls, it's different, especially with
d> port forwarding because it then becomes the responsibility of the client
d> that receives those forwarded ports to protect itself since the firewall
d> doesn't do stateful inspection (or any inspection) on the forwarded
d> traffic so I'd still look at the firewall in ArcaOS.

The Cisco ASA firewall has this nifty feature that allows you to limit
simultaneous connections from the same source/external IP.  That is what I put
in place for tcp/23 for the BBS nodes over here.  At least that keeps the same
IP from flooding connections.  

- Mark

--- WWIVToss v.1.52 
 * Origin:  http://www.weather-station.org * Bel Air, MD -USA (618:100/12.0)