Routing (cont.) 'reply-to' for incoming connections filtered statefully, replies are routed through the specified interface 'fastroute' for incoming packets shortcircuits the local TCP/IP stack and immediately sends the packet out (through the interface determined by the routing table) 'dup-to' sends a duplicate of the packet to another interface (where an IDS might listen) while the original packet is routed normally.