On 2010-04-23 08:25, Tim Kindberg wrote: > 1. traffic to example1.org is to be resolved normally, i.e. > ultimately by the DNS server on the internet that the captive > portal machine knows about In other words, DNS tunnelling will work without restriction. Thanks for keeping this classic loophole available for the few that care to use it. Yes, I'm being sincere. s.