Hello, I have 3 machines at home. I want to configure machine A which runs Linux (which has 2 NIC's currently) as a firewall. My plan is: eth0 of machine A goes to my ISP which uses DHCP, eth1 goes to machine B (Windows). And I could put in a third NIC (eth2) in machine A that goes to machine C (through a switch) to access the internet but that one does not need direct connections (see below). Currently machine B is connected to my ISP as I need direct connections on all ports from the internet because if I do as I said above it will work also, but then direct connections from the net are not possible, all connections that should go to machine B (like it does now) will go to machine A and that's not what I want. I just want the firewall to act transparently so that I can block ports in the firewall so that I don't have to use software on machine B to block ports, just like my ISP does, it blocks ports below 1024 except 113 incoming and some outgoing, and I still can have direct connections to this machine (B) from the internet. So basicly I want to be able to do the same thing as my ISP. If anyone can help me with this or has a better suggestion on how to connect the devices to accomplish what I want, please help ;) I hope my explanation is a bit understandble ;) ----------------------------------------------------- Mail.be, WebMail and Virtual Office http://www.mail.be - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html