The following rules: pass out on rtk0 dup-to xi0 all pass in on rtk0 dup-to xi0 all do what I expect, and mirror rtk0 to xi0. However, if I change "pass" to "log", I no longer see anything out of xi0. Any idea why? Cheers, Patrick (-current/i386 of 25 May)