> The RA has lifetime=1 to mitigate this. We found that it works extremely > well in practice. ;) it should :-) I last tip, dunno if you already did that in the nasl module - set the router priority to low to further reduce the risk. Greets, Marc -- Marc Heuse www.mh-sec.de PGP: FEDD 5B50 C087 F8DF 5CB9 876F 7FDD E533 BF4F 891A