Hi, > I think that the right way is to get packets being masqueraded from the > public server with it's tunnel address, so that the masqueraded server will > know where to send back packets. Do you only need http traffic? Maybe your solution is to install a http proxy server on your public machine? Another possibilty is to use programs such as redir. Christian