I have a system with two interfaces, eth0 is on the Internet, eth1 on an internal connection. Because of using ipsec and its internal routing, I need certain connections to be made from the internal interface that will be going out over the ipsec0 device. For example: eth0: 1.2.3.4 (internet address) ipsec0: 1.2.3.4 (always the same as the external interface) eth1: 192.168.0.1 (internal address) ping -n 192.168.1.1 (over VPN) attempts to send a ping from 1.2.3.4 because ipsec0's interface address is 1.2.3.4. How can I get arbitrary connects, based on destination, to be sourced from 192.168.0.1 instead of 1.2.3.4? I'm assuming some basic source NATting is required; off to read the docs again ... -- Michael T. Babcock CTO, FibreSpeed Ltd. (Hosting, Security, Consultation, Database, etc) http://www.fibrespeed.net/~mbabcock/