Note that our ipfilterd does not have interface information. The implications of this are discussed in Brent's paper. Eliot Lear [lear @ sgi . com]