ip_cloaking: improved cloaking