Hi, I have just noticed an interaction between reply-to and synproxy.
It seems that the packets generated by the firewall as it performs synproxying are not subject to the reply-to directive - i.e they are routed normally. I am not sure whether this is a bug (though I suspect so) or easily fixed, but it is worth noting. -d