.Hey all I have a vpn I am trying to enable and was wondering if any of you had some ideas to help me out Internal I have 10.0.0.4<------------------>{10.0.0.1 Routing 66.x.x.x.}<---------------------->Internet The dot 4 machine is a Microsoft VPN. The 1 machine is a firewall masquerading the internal net to the outside. Now I need someone on the outside to tunnel into the 4 machine and access the internal network. The MS VPN is configured, but I need to set up the firewall to forward these ports. Any ideas. I saw some ipchain rules with the vpn how to, but I was hoping to use a proxy of some sort. The firewall is pretty open, it is a development lab, backed up of course. Now I am just trying to open the port for vpn and then start closing the other ports down. Of course my process goes against every sane Network Admins philosophy but upper management wants it this way. SO BE IT, I warned them. Any ideas. Thanks, Mike