Hi there Susers!!!! Well I am very happy to see that my SuSE box is currently operating as fileserver for a small network of 4 PCs (Win9X). All the users have also roaming profiles and they all have a local intranet account so they can pass along e-mail messages! Now here comes the final and the hardest (for me) part. I want all the PCs to have the ability to connect to the internet. That is, I want all the PCs to be able to access everything (no limitations) on the internet everytime the linux-box connects to it but I do not want anyone to access from the internet anything on my private lan. I was looking at the firewall examples that SuSE came with but I cannot understand anything for the life of me!!! Can someone please send me any suggestions? If you have something already running which looks a lot like my case, please tell me what you did so that I can just follow up with your knowledge... :-) Well here is the situation INTERNET <-------modem56Kconenction----->SuSE 7.3 Box <-----Hub 10/100Mbps----> 4 PCs All PCs on the lan receive their IP from the Linux DHCP Server and is of the format 192.168.2.XX. Linux-box IP 192.168.2.1 Currently Samba is running for file sharing. Want to setup firewall (with a proxy like Squid to generate log files of users that access services on the net) so that: Any PC on the 192.168.2.XX can access EVERYTHING on the internet (that goes for www,ftp,pop3 mail, winmx, etc); services will be restricted based on the user-name (is this possible??). Noone outside the 192.168.2.XX can access anything on the private Lan. Samba continues to carry on the work of the internal lan without being affected and/or published to the net. There is no local intranet web running on linux-box. In the case of a power-failure, when electricity is re-established and the linux box reboots, all firewall considerations should be restored as they were. Thank you all in advance for any help you can give me on this!!! :-) Chris