Andrew Wingorodov wrote: > how to forbid to process IP, which are fragmentation? ipfw add deny all from any to any frag ...but please be very sure that you are passing the ICMP message types used for path MTU discovery, or else your network may become a "notwork", at least as far as large packet sizes are concerned. -- -Chuck