One other detail:  After one of these "killer packets" is received, not 
only does the listening process hang, but the server machine never sends 
a Syn/Ack packet in response.  For that matter, it doesn't send Syn/Ack 
packets in response to other Syn packets from non-tunnelled machines.

Chris

-- 
Chris Jones               chris@cjones.org                www.cjones.org