>it struck me at one point that the only thing needed (and perhaps i'm >way over-simplifying this) is for ip_output() to do the same checks >that ip_input() does in looking for local addresses. no, the way kernel manipulates interface route (routing entry for 10.1.1.0/24) is wrong. itojun