>>> Fixing all the code that makes assumptions based solely on the IP
>>> address would certainly be a good thing.  [...]
>> Maybe adding to tcpwrappers the option for checking for
>> source-routed connections would be the easiest way?
> Unless I'm unaware of some sockets magic TCP Wrappers (or any other
> user-level application) can never do this....

You're unaware.  See [gs]etsockopt(,IPPROTO_IP,IP_OPTIONS,,).

/~\ The ASCII				der Mouse
\ / Ribbon Campaign
 X  Against HTML	       mouse@rodents.montreal.qc.ca
/ \ Email!	     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B