Is there a way to filter IPSec packets in Transport mode AFTER they've been decrypted? ------ "The pain of war cannot exceed the woe of aftermath The drums will shake the castle walls, the Ringwraiths ride in black..." Led Zeppelin, "The Battle of Evermore"