George Borisov wrote: > I think I am beginning to understand this better. You see, I > originally thought the LAN hosts and the internal interface of > the firewall used the lowest one between the two. :-/ Only if you have pMTU running successfully end-to-end. That requires ICMP working end-to-end which I think I read was a problem with your set-up... Matt.