> - 1 for LAN (users)
> - 1 for private DMZ, with local IP addresses. I use "rdr" keyword of
> IPFilter to address machines in this DMZ.
> - 1 for public DMZ, with public IP addresses
> - 1 for normal Internet link, which is default gateway
> - 1 for Training customers (local). It permits during Training
> sessions to access Internet without any access to LAN, DMZ,...

> IPFilter on this machine has already measured 2000 connections at the same
> time (states).

IF this were the streams based network stack I designed for ICL (with
a separate mux and a single stream from it to each hardware driver), you
could add another mux layer to separate otherwise inseparabel traffic.....

But since it isn't..........

    David