On Tue, 3 Jul 2001, Ralph van Etten wrote: > #ip rule add from 192.168.11.70 table fast pref 102 > #ip route add 0/0 dev eth2 table fast > #ip route flush cache You're not doing source address selection (the src argument to ip route add), causing the masquerading code to possibly select the wrong address to masquerade to. Check the archives for the postings on multipath upstream routing for information on a setup with multiple upstreams. Such a setup will gladly masquerade on each of the uplinks, and *work*. From that you can, without a doubt, simplify to your situation. Oh, 2.2.17 is quite adequate. Doei, Arthur. -- /\ / | arthurvl@xxxxxxxxxx | Work like you don't need the money /__\ / | A friend is someone with whom | Love like you have never been hurt / \/__ | you can dare to be yourself | Dance like there's nobody watching