Hi all I have my network accessing the internet using another companies network, to separate my network (192.168.100.0 on eth0) from the other companies network (192.168.108.0 on eth1) i use a linux computer with suse firewall 2 with masq suport and squid, obvious that the other companies network is on the untrusted device. The problem came when we started to use the others company VPN servers that give the VPN clients their own networks IP (192.168.108.0). Question : How can i allow a range of IPs from the other companies network to go through my firewall ? Litle net drawing : INET ----- other companies network -----///// FW \\\\\\ ----- my network ... 192.168.108.0 192.168.100.0 Thanks in advance Jorge Canelhas ------------------------- Are u a retro computing fan ? check : http://www.retroreview.com