Index: chapter.xml =================================================================== --- chapter.xml +++ chapter.xml @@ -2267,7 +2267,7 @@ after the rules that allow traffic on trusted interface. Normally, IP fragmentation should not happen, but when dealing with IPSEC/ESP/GRE - tunneling traffic it might and the reassmabling of fragments + tunneling traffic it might and the reassembling of fragments is necessary before handing the complete packet over to the in-kernel NAT facility.