On Sunday 08 April 2007, Drew Tomlinson wrote: > OK, I've done some more digging and maybe I understand now. I was > missing the fact that NAT occurs BEFORE filtering Why not tag the packets? Chris