On Monday 16 August 2004 03:31, Patrick McHardy wrote: > The problem is ipv4_sabotage_out in the briding code. It prevents the > packet from hitting the LOCAL_OUT hook while it is still unencrypted. > When it hits the bridging code and its LOCAL_OUT hook it's too late. > Not sure how to handle it yet. I'll have a look at that after I'm finished with the IPv6 bridge firewalling stuff. cheers, Bart