Fine, the first fragment containing the upper-level protocol header may have gone a different route. However, if you let the rest of the fragments through as a result, I'd argue you have a security hole. Derrell