- Respect TTL - Do not rely on the host to handle TTL 0, instead decrement TTL on all processed packets - Verify Checksums - Do not translate packets that have invalid checksums