Ok, that is not what I was thinking of.  We have made no specific provisions for this.<p><i>However</i>, we were scared enough about &quot;unknown unknowns&quot; that we set up this aspect of our service such that every ZFS send&#x2F;recv customer gets their own zpool inside their own bhyve.<p>So it might be a DOS attack, but I don&#x27;t think there is a data attack against rsync.net here.  Comments ?<p>Unrelated:  I&#x27;m curious - when I speak of snapshots corrupted by extended attributes or &quot;disappearing snapshots&quot;, do you know what I mean ?  Maybe we should talk :)