Hello lucky combination ... :) IPT <...> -j ECN --ecn-tcp-remove on incoming interface IPT <...> -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu on outgoing interface and most interesting ... IPT <...> -j TTL --ttl-set 128 on outgoing interface !!! M$ rules ? :) once more - thnx to Mark best regards Pawel Pilat __________________________________ Do you Yahoo!? New and Improved Yahoo! Mail - 100MB free storage! http://promotions.yahoo.com/new_mail