I'm the last person you'd ask about TCP/IP, but doesn't it have something to do with fragmented UDP packets being typically dropped by firewalls? Hence the support for TCP in Kerberos: http://support.microsoft.com/?id=244474 -- Luke --