>>it struck me at one point that the only thing needed (and perhaps i'm
>>way over-simplifying this) is for ip_output() to do the same checks
>>that ip_input() does in looking for local addresses.
>
>	no, the way kernel manipulates interface route (routing entry for
>	10.1.1.0/24) is wrong.

i'll have to take your word for that, since i know some stuff, but
other stuff i'm completely lost in.  :)

-- 
|-----< "CODE WARRIOR" >-----|
codewarrior@daemon.org             * "ah!  i see you have the internet
twofsonet@graffiti.com (Andrew Brown)                that goes *ping*!"
andrew@crossbar.com       * "information is power -- share the wealth."