Various small things (in 3.3) TCP window scaling support (RFC 1323) IP ID modulation/rewriting check protocol checksums (TCP, UDP, ICMP, ICMP6) allocate NAT proxy ports per peer (breaks the 65k connection limit) configurable proxy ports for NAT, static ports (IPsec IKE) replaced skip step calculation algorithm O(n^2) -> O(n)