is it true that I can safely ignore all that crap in the howto about KERNEL_DIR, if all I want is a copy of ipnatctl so that post 2.3.15 kernels are as functional as before? or, to put it another way, is it true that post .15 kernels still have the ability to do the basic masq I used to do with ipchains, but simply need a different userspace configurator? thanks, mark hahn.