Ahh, yes that would be a problem. On the other hand, wouldn't a ddos be visible in the logs? Logs should be checked centrally anyway, so a 30 second flood of

Ahh, yes that would be a problem. On the other hand, wouldn't a ddos be visible in the logs? Logs should be checked centrally anyway, so a 30 second flood of messages should be visible. But in the end, you are right that it will be hard to do this the right way.