On Mon, Mar 26, 2007 at 02:58:20AM +0200, Volker wrote: > Andrew, Andre & all, > > I've checked it out once more (with a corrected setup) and now have > been able to block traffic on enc0 in both directions (no matter if > the tunnel endpoint is final destination or not). Great. Thanks for looking into it anyway. Andrew