Thanks for the response as well. Ok, about the SND_F_FORCE_SOCKET - it would be indeed good to make it configurable. I assume that it is only used for the forward() function - so you could add an flag parameter to the function to control this behaviour. Then it could be extended in the future (as bitmask) if there are other extensions necessary. Example: - ipsec_forward("location"); # old behaviour - ipsec_forward("location", "1"); new behaviour - ipsec_forward("location", "0"); old behaviour