>What is really needed is an addition to the krb5.conf file.  Someone
>should code this.  :)
>
>[libdefaults]
>	scan_interfaces = no
>	add_ipaddresses = 1.2.3.4, 2.3.4.5

The second option is already in the Kerberos in NetBSD, but the option
is called "proxy_gateway" (sigh, in retrospect, that's a lousy name).
I think that perhaps the "noaddresses" might be a better way to go
in the long run, though.

--Ken