The simulation and analysis of a simple model of an ATM multiplexer in which policed sources feed a deterministically served buffer is described. The results show that the leaky bucket mechanism introduces correlations into the policed streams which allow bounds to be placed on cell loss caused by buffer overflow.