Hi, I've been looking through the docs and have searched through some of the archives for this list and still can't seem to find an answer for this one. Can anyone tell me the quickest way to get a VPN connection working from a privately-addressed windows box, through suse 7.1, to a machine at work? The client/server VPN connection works fine when I connect the windows box to the cable modem and use a public IP. I just set up my home network today as so: |-- windows 10.0.0.2 (this is the VPN client box) cable modem --- suse 7.1 ---|-- windows 10.0.0.3 |-- mac 10.0.0.4 I read the masquerade-VPN howto but it didn't address using the susefirewall script. I am pretty new to this but I followed the manual to set up masquerading, and in item 9) of etc/rc.config.d/firewall.rc.config I did the following: FW_SERVICES_EXTERNAL_TCP="pptp gre 1723" # Services, visible to the external net (normally internet), UDP # Common: domain FW_SERVICES_EXTERNAL_UDP="" # Externally visible services, other IP protocols # For VPN/Routing which END at the firewall!! FW_SERVICES_EXTERNAL_IP="pptp gre 1723" # # Services visible to the DMZ, TCP # Common: smtp domain FW_SERVICES_DMZ_TCP="" # Services visible to the DMZ, UDP # Common: domain syslog FW_SERVICES_DMZ_UDP="" # Services visible to the DMZ, other IP protocols # For VPN/Routing which END at the firewall!! FW_SERVICES_DMZ_IP="" # # Services, visible to the internal net, TCP # Common: ssh smtp domain FW_SERVICES_INTERNAL_TCP="pptp gre 1723" # Services, visible to the internal net, UDP # Common: domain syslog FW_SERVICES_INTERNAL_UDP="" # For VPN/Routing which END at the firewall!! FW_SERVICES_INTERNAL_IP="pptp gre 1723" Obviously I don't really know what I'm doing, I've tried '1723', 'pptp 1723', 'gre 1723' as well with all four of the settings that contain values above. I also don't really understand what is meant by "VPN/routing which end at the firewall" if using this setting is supposed to allow you to do VPN through the firewall, but maybe I'm on the wrong track... Can anyone help me with this? Thanks, Chris