two more DOS attack fixes