The Master(s) would need to be able to connect to Slave 2 in order to perform any replication. There are many other issues here though, such as referrals from behind FW3 to the master(s) etc - those are other questions though, Cheers, Jason > > Master 1 --\ | | | | | | > Master 2 -------|Firewall 1|------------|Firewall 2|--Internet--|Firewall 3|------Slave 2 > Slave 1 ---/ | | | | | | > > Master 1, Master 2, and Slave 1 have private IPs th at are NATed before going to the Internet. > Slave 2 has a public IP address. I need to know if this is possible without giving either master or > Slave 1 a public IP address. Of course this will be over SSL, so that will help. Would Fedora > Directory Server connect to Slave 2 or does Slave 2 have to connect to one of the Masters? > > > >