On Sat, 2007-09-01 at 09:34 +0200, Benny Amorsen wrote: > It would be nicer if the bind() failed in the application. At least > the application would have a chance at telling the user what went > wrong, instead of just not working properly. I think using SELinux instead of ip(6)tables here would achieve that. /abo