Joe, > properly. After you change the max packet size for packets from the > director to the Tun realserver, then the client will be sent a "needs > fragmenting" icmp packet. To clarify, does this mean I need to execute some command on the director? Or do I only apply the iptable rule on the real servers? Thanks, Matthew