I had a couple questions about the different methods talked about here, probably focusing on CIPE, FreeSWAN/OpenSWAN, and the OpenVPN (along with any others users may chime in with) 1. Where in the netfilter path do these solutions package up data? Important to know if we see tunnel/VPN packets or the contents which are going into them, both incoming and outgoing 2. Which of these guys support broadcast or multicast? 3. Do any of these support non-encrypted transmission? The reason for this would be if a higher level/later service provided the encryption over the risky sections of a transmission 4. What kind of overhead do these cost? I was curious from the perspective of initialization/updates and also any additional packet headers (rough guess). Thanks ahead of time!! -Scott __________________________________ Do you Yahoo!? Yahoo! Tax Center - File online by April 15th http://taxes.yahoo.com/filing.html