Hello list members, I'm having some difficulty configuring SuSEfirewall 2 to masquerade on two separate addresses. I've read through the examples that accompany the firewall package, and still cannot figure out the proper settings. All the examples show a trusted network that needs access to machines INSIDE the private lan or the DMZ. This is not what I'm looking for. I have three interfaces in the firewall. One points to the private LAN, one to the public Internet, and a third to the corporate office. Naturally, all three have IP addresses on separate networks. I want to give access to the corporate network from within the private LAN, (the corporate office requires me to masquerade), AND provide limited access to the Internet. I don't need any access from the outside AT ALL, not even from the corporate office. I've added both external interfaces to FW_DEV_EXT and included the private network address to FW_MASQ_NETS, but still no go to the corporate network. Routing is configured correctly, and all is well with the internet traffic. Something is still filtering packets to/from the corporate network. Please help. ~Dale ________________________________ Dale Schuster MIS Manager Lake Tahoe Horizon Casino Resort dschuster@horizoncasino.com