I don't want to restart the packet filter war but is there any plan to install the new portmap daemon that blocks requests on -current? I see they have code for a SunOS/BSD4.3 version released, can it be easily integrated in to NetBSD? See recent CERT portmap advisory for gory details... -Rob