Hi, For TCP, I've seen the network layer change things (eg setting bits on incoming traffic to mark which interface it came in on), so you can't guarantee the outbound ToS == inbound ToS. Adrian