>Some combinations may not be possible, due to ambiguities in >processing order. For example, IP-AH-AH or IP-ESP-AH. What do you mean? I agree that they might not be especially useful, but if you encode a packet like that they're still not ambiguous. Phil