As a follow up to my initial questions, I began looking into the possible viability of using libipq and the QUEUE target. Right now I'm using the example provided in the man page, but with the same results... The packets are looping and eventually producing icmp in-transit timeouts. I thought that doing an ipq_set_verdict() would allow the packet to actually be accepted, short circuiting the rest of the kernel processing of the packet... It appears that this is not the case, or am I missing something? Again, all I really need to do it accept traffic for addresses that aren't bound to any interfaces, without modifying the original destination address. It seems that one way or another, this must be possible. -- <flah@xxxxxxxx> \x104\x97\x108\x102
