The docs says that ident doesn't work with intercept proxying, and it doesn't, but I think it wouldn't be too hard to make it work. In fact maybe as simple as setting COMM_TRANSPARENT on the ident socket. Does that sound plausible? What I've found is that not only doesn't ident not work on an intercepted connection, the connection just hangs forever (or at least for the 10 minutes that I waited) if any acl's are encountered that would require an ident lookup. Thanks James
