It looks like my draft article on single-address proxy-arp firewalls may be of interest: http://www.blars.org/sapaf.html -- Blars Blarson blarson@blars.org http://www.blars.org/blars.html "Text is a way we cheat time." -- Patrick Nielsen Hayden