Hi Mak,This turns out to be a very interesting question. I googled for "skype protocol" and came up with the link below. It is a well-written, scholarly paper. http://arxiv.org/ftp/cs/papers/0412/0412017.pdfRegards,Dave

Hi,The default changed from 12 to 24 in version 6.2.sysopt security fraggaurd enables fragmentation inspection. The fragment size and fragment chain commands modify the bhavior of fragmentation inspection.Regards,Dave

Hi,Alternatively, you could try:alias (inside) 192.168.10.4 209.209.209.209 netmask 255.255.255.255Alias was used prior to 6.2. It should also re-write the DNS A-Record.Regards,Dave

Hi Remo,If the device in your trace is a host on the inside, the PIX should merely "pass" the unreachable message to the inside host. It is up to the host to read the ICMP message and reduce its MTU for connections to that network. If the PIX modifi...

Hi,710003 is actually an existing logg message from the 6.x code. You should have been seeing these messages previously.The way I read the error message is that the PIX is interpreting the the broadcast with destination port 138 as a request to conn...