On 9/10/07, Serge E. Hallyn <serue at us.ibm.com> wrote: > > The only downside I see right now is what to do about a sendto() on a > udp socket that hasn't been bound. Maybe have additional chains in the new iptable called "sendto" and "recvfrom" that are invoked for those operations on unbound datagram sockets? Paul