Hi Net This is sort of an abstract question. When using pf to only preform nat do I need to have at least one rule ? Can I omit the boiler plate "scrub rule " ? Other then allowing fragments and other fun stuff to get passed would this have any other implications ? --- Mark Saad Lucera Financial Infrastructures, LLC msaad at lucera.com