o	Filter out 0x17
o	Don't use ifa=191 & ifa=185 to identify protocols... It's EVIL

o	Add /A support for CDROP, NOPOST
