Hello all, I just figured out why my router wouldn't work. The MTU of the external interface was 1472 (i set that) and I read the thing about IP_masq code not liking non-fragmented packets.. So just a quick couple of questions.. 1) Isn't it faster if it doens't have to fragment the packet?? as 1472 is the MTU of the next hop out to the net. 2) Is it possible to use IP_MASQ without fragmenting packets?? maybe I should use 2.4 with netfilter as opposed to 2.2.16 with ipchains (current setup)? 3) Any tips for increasing performance on net (2x eepro 10/100 NIC's) apart from TOS mangling via ipchains? and MTU matching? Thanks, Stephen Dennis -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug