Let's remember my problem first: I have two computers with ethernet cards connected to each other by a cross-over cable. The first computer is connected to the internet by modem (dynamic IP's for computer and gateway). The LAN is configured with static IP's: 192.168.0.1/24 for the gateway (IP forwarding and masquerading enabled, as well as the DNS servers of the external connection), 192.168.0.2/24 for the client (DNS servers also set). The problem is the client cannot see anything outside my LAN. The solution does not involve IP masquerading; it only has to do with IP forwarding. First we enable IP routing in YaST or by manually editing /etc/sysconfig/SuSEfirewall2 and setting FW_ROUTE="yes". Then we have to manually set FW_FORWARD="192.168.0.0/24,0/0". "0/0" is the heart of every network in the computer. This should definitely have been included in YaST, or at least mentioned in the relevant documentation... BTW, pinging outside the LAN is another story. Konstantinos Tampouris