Hi Mike, At 07:12 16-12-2011, Mike Barnard wrote: >Any ideas on how to mitigate ICMP and DNS tunneling or for that >matter, any form of tunneling that allows one access to the Internet >without paying for it and moreover, using someones infrastructure to do so? You could block all off-net traffic from non-authenticated clients. Regards, -sm