IP fragmentation offset 'different 1' Hi, Frederic, In the enhanced ruleset, there are 2 IP fragmentation rules, i.e., "different 0" and "MF". I just have 2 simple questions: (1) For legitimate fragmented packets, the flag might be 'MF', also, the offset might be non-zero (for example, 1480). Will LnS block such 'legitimate' packets? (2) Why does LnS introduce 'Equal 1' and 'different 1'? Is there any special reason for '1'? Thanks in advance.