True firewall should run on a seperate machine, take a look at some of the dedicated distros : eg) www.smoothwall.org www.freesco.org and there's one called Astaro I have used ipchains in Suse 7.0 to protect my network but now I want to protect our intranet server safer -more features and more confortable . I read about TIS ,Sinus ,seattle firewall ,firestarter ..... Can someone offert on ? Thanx Frank