> It would, IMHO, be best if hosts acting as firewalls didn't allow
> source routing *through* them. I'm sick of having to hack this out of
> kernels rather than having an option, and yes, its strictly necessary
> if you are building an application level firewall. IMHO, if you don't
> have ip forwarding on, you shouldn't forward packets, PERIOD.

I dont think it should be linked with any other options.  There
are times when you'd like ip-forwarding and no source routing and
times when you'd like source routing and no ip-forwarding.  

> Perry