Hi to all, I need to modify the rules of the firewall2. What I want is to masquerade all internal machines - but not globally! The basis has to be that nothing will be allowed (except tcp port 80 for http). Every other protocol / port has to added as an extra rule; e.g. if a server with a fixed ip in the internet has to be reached on a certain port. I think I have to include the custom rules (FW_CUSTOMRULES="/etc/sysconfig/scripts/SuSEfirewall2-custom"). Has anyone experience with it? Bye, Dirk