thanks for the suggestions, ideas and info everyone...
i'll start by looking more closely at the source code and looking at what kqueue and kevents actually are (!) before i dive in and change natd. (for all those who suggested ipf/ipnat - yes i know, but unfortunately natd if part of a bigger product which would have to be rewritten - i did think that there would'nt be a problem with doing the NATing in ipnat and the firewalling in ipfw but i understand that ipnat is done _before_ ipfw sees that packets (which makes sense) and this is the wrong way around for us) i'll let you all know how i get on - and post any difficult questions again - thanks tariq intY has automatically scanned this email with Sophos Anti-Virus (www.inty.net) To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message