> Erik's mod would help, but add a seccond threshold where after 15 secconds > you kill the proc failed the most fork() calls - the danger here is a spam > storm may cause listen(1) to be killed.
You could put the rate limiting in listen(8) first, you may have noticed that inetd(8) has this feature, at least in NetBSD, enabled by default, in contravention of the POLA. ++L
