Hi, I am running a Linux box with suse 8.0 professional as an internet gateway server. I have a cisco router connected permanently to the ISP. What I want to do is protect my internal network running on 192.168.8.0/255.255.255.0 , I only have one public IP from the ISP for the Cisco router and I am interested in connecting all the workstations on the internal network to internet via the linux box. I am want to firewall my internal network from outsiders but with the webserver being available publicly in future. Should I proxy or IP masquerade? If so what commands do I need to enter in the firewall or proxy scripts to firewall and enable the machines through the suse box to connect to the internet? I am have squid installed on suse server. Thanks Atw Swaziland, Africa Ambrose online at http://www.geocities.com/atwebaze/ --------------------------------- Do you Yahoo!? Protect your identity with Yahoo! Mail AddressGuard