| Also, it should be possible to do IP layer-only filtering on the real big | boxes. That's not a commercial possibility. | But it never hurts to implement all of this in the fast | path, of course. :-) So sayeth you. ;-( Tony