-----BEGIN PGP SIGNED MESSAGE-----
Last I looked, Linux has very poor (practically non-existant) source address selection code. You can perhaps deal with this by putting in explicit "src" rules if you install the default route manually. I agree that this sucks. For fun, try a NetBSD/FreeBSD (live) CD on a system and see if it does better. I have much better luck with IPv6 on *BSD, alas. - -- ] ON HUMILITY: to err is human. To moo, bovine. | firewalls [ ] Michael Richardson, Xelerance Corporation, Ottawa, ON |net architect[ ] [EMAIL PROTECTED] http://www.sandelman.ottawa.on.ca/mcr/ |device driver[ ] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Finger me for keys iQCVAwUBQxi5nIqHRg3pndX9AQHZ2QP+Pnb/VlH/0VfKWKobeCG8hLbGn9qGzfR5 yf4e7ibqFtuk1Bt0VJU3Yf52e3q2QuBr/k/mTuXPXNMfT7DfGQ1ZTBtsqYdSctnU r3Z7Bf6pXHf1F1SGXzzQ8xvSXoQ8Kd7lc5CCTPUBP4W7VF8y9JeJi5AIHhCd3gV9 fth9niV3QPs= =e/aQ -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]