CBAC can expose a few unexpected problems. In one case a badly-behaved NT workstation spewed DNS lookups and exceeded the threshhold set for maximum sessions per minute, effectively shutting down the interface. In another case we found old NCD X-te...