> Where this is not an option, I think that L3 separation is a very > welcome addition to avoid accidental communication, from random > browsing to subnet-sweeping malware :) But an iptables rule does the same thing, no? -- damjan | дамјан This is my jabber ID --> damjan at bagra.net.mk -- not my mail address, it's a Jabber ID --^ :)