>>>>> "P" == =?ISO-8859-1?Q?P=E5llen?=  <ISO-8859-1> writes:

P> When we kill tcpdump the forwarding is killed too.

This sounds vaguely familiar to some problems I had with appletalk, but
my first suspicion here would be: did you set options GATEWAY in the
kernel config? Or check/set with sysctl:

% sysctl net.inet.ip.forwarding
net.inet.ip.forwarding = 1


-- 
==John Kohl <jtk@kolvir.arlington.ma.us>, <john_kohl@alum.mit.edu>
Home page: <http://people.ne.mediaone.net/jtk/>
Bicycling and Skiing to keep fit.