Why our Rendezvous tunneling experiments failed
We hacked so hard and pulled all kinds of IP tricks but now I read on a Mailinglist:
the mDNSResponder will anyway ignore any
incoming packet that has a time-to-live < 255.
So we have to compile stealth forwarding into our router’s kernels.