> I just posted a long rant on why this would *not* break PMTU discovery. > Would you care to point me to the error of my ways? Oh, okay :-). Our site won't accept RFC1918 source address packets from the Internet -- source address spoof protection. I suspect we're in good company. Jim Shankland Flying Fox Computer Systems, Inc.