>This brings me to an interesting point...
>
>We need a tcp-wrapper solution half in/half out of the kernel. Why you
>say? Well, if the kernel has the tcpd controlls or tcpd can get high enough
>in the IP stack then it can do all sorts of evil IP level tricks:
Isn't that what IP firewalls are about?