gaia:~# ping 10.254.4.10 PING 10.254.4.10 (10.254.4.10): 56 data bytes --- 10.254.4.10 ping statistics --- 28 packets transmitted, 0 packets received, 100% packet loss but after ssh-ing into the IP of the last ``new peer'', i can do: gaio@ulysses:~$ ping 10.254.10.4 PING 10.254.10.4 (10.254.10.4): 56 data bytes 64 bytes from 10.254.10.4: icmp_seq=0 ttl=255 time=749.6 ms 64 bytes from 10.254.10.4: icmp_seq=1 ttl=255 time=817.0 ms 64 bytes from 10.254.10.4: icmp_seq=2 ttl=255 time=1382.5 ms and then (more, at the same time ;) suddenly: gaia:~# ping 10.254.4.10 PING 10.254.4.10 (10.254.4.10): 56 data bytes 64 bytes from 10.254.4.10: icmp_seq=15 ttl=64 time=757.0 ms 64 bytes from 10.254.4.10: icmp_seq=16 ttl=64 time=942.7 ms 64 bytes from 10.254.4.10: icmp_seq=17 ttl=64 time=906.5 ms 64 bytes from 10.254.4.10: icmp_seq=19 ttl=64 time=1016.9 ms 64 bytes from 10.254.4.10: icmp_seq=20 ttl=64 time=817.6 ms 64 bytes from 10.254.4.10: icmp_seq=21 ttl=64 time=461.9 ms so seems that in this configuration i can originate traffic (say better, i can originate key exchange) only from the dynip side. Can i fiddle with this or is a cipe protocol limitation?! Thanks. -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.sv.lnf.it/ Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN) gaio(at)sv.lnf.it tel +39-0434-842711 fax +39-0434-842797 NO al super tributo alla SIAE! http://www.edisport.it/edisport/afdigitale/petizione.nsf/main?openframeset