@mykd @anildash (and if you do it then it's really your OS kernel doing the routing from a tun/tap to your real network interface, so all the usual routing controls and packet filtering applies)