On Sun, Dec 31, 2000 at 12:42:51PM +1100, Brian May wrote: > 2. the remote host determines the real IP address via ESP and uses > that instead of the correct address.
tcpdump and masquerading is somewhat tricky. It's a well knon kernel feature and the reason for it is, that is is much faster for normal operation that way: http://www.uwsg.iu.edu/hypermail/linux/kernel/9707.0/0066.html Greetings Bernd -- (OO) -- [EMAIL PROTECTED] -- ( .. ) [EMAIL PROTECTED],linux.de,debian.org} http://home.pages.de/~eckes/ o--o *plush* 2048/93600EFD [EMAIL PROTECTED] +497257930613 BE5-RIPE (O____O) When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl!