> Isn't there an issue with port number policy lookups and fragmented packets? Not on an end-system! Dan