Craig, I just glanced over your 3 parts. I have not thought them over in details yet. But I have a simple question : I got the impression if a IP header field is labeled "invariant" by you, it does not mean it will not be changed. It means that if it is changed, then the packet should be considered "bad". Is my impression correct ? Thank you. Regards, Pau-Chen