> I don't think anyone is asking for a change in the default behaviour > (although my point about breaking modules does apply), people would be > satisfied, even ecstatic, if we had a simple way (flag) to set to make > Linux work without setting /proc filters, using arpfilter, applying source > routes (David's suggestion) and generally jumping through hoops. Agree! Just a flag (ARP_ISOLATED, default to 0) in /proc/sys/net/ipv4/conf/*? The default behaviour of the current (and future kernels) stays as it is now, so it doesn't break for anyone, and a lot of people (including me :) benefit from a much easier setup. No need to implement a whole hidden scenario either. Regards, Bas - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html