>> TTL=1 should work on tunnels. > only if the tunneled packets do not inherit ttl from their payload,.. FWIW, I use TTL=1 in Babel, and have received no complaints. Of course, I've got way fewer users than you do. --Juliusz