(suse 7.2 with kernel 2.4.4, firewall2 installed) Firewall is running a NAT for DSL without a DMZ. When activating it, the local computer isn't anymore allowed to access internet, but the local net is, and vice versa, deactivating means allowing the router to access the net but NAT does of course not run any more. ... some firewall-snippets: FW_DEV_EXT="ppp0" FW_DEV_INT="eth1" FW_DEV_DMZ="" FW_ROUTE="yes" FW_MASQUERADE="yes" FW_MASQ_NETS="192.168.0.0/24" FW_PROTECT_FROM_INTERNAL="no" FW_SERVICES_EXT_TCP="" FW_SERVICES_EXT_UDP="" # Common: domain FW_SERVICES_EXT_IP="" FW_SERVICES_DMZ_TCP="" FW_SERVICES_DMZ_UDP="" FW_SERVICES_DMZ_IP="" FW_SERVICES_INT_TCP="telnet" FW_SERVICES_INT_UDP="" FW_SERVICES_INT_IP="" Any suggestions? Mit freundlichen Grüßen Jochen Stärk usegroup GdBR