Michael Richardson wrote: > If you want to do NAT before a tunnel, then you'll have to use KLIPS. > It does not build on 2.6, but it will soon. I think you are wrong here. If you _don't_ want to snat before tunnel you have to set exceptions with 26sec. -- Tuomo Soini <tis at foobar.fi> Linux and network services +358 40 5240030 Foobar Oy <http://foobar.fi/>