Lazlo, Is it possible to use tproxy 4.1 without conntrack or any other extra state-table? i.e. Do IP_TRANSPARENT requires nat? If that's the case, it involves an extra table (conntrack) to maintain. Freebind only uses filedescriptor table, so it uses less resources I believe. Am I right? Is freebind not accepted by kernel guys? Regards, -- Gonzalo A. Arana