I'm not sure which of the two to use for my firewall. Is there a reason to prefer one over the other? Yes, masquerading has more protocols but I do not like the idea of allowing things like quake or active ftp through the firewall anyway. Michael -- Michael Meskes | Go SF 49ers! Th.-Heuss-Str. 61, D-41812 Erkelenz | Go Rhein Fire! Tel.: (+49) 2431/72651 | Use Debian GNU/Linux! Email: Michael@Fam-Meskes.De | Use PostgreSQL!