I'm doing some volunteer work for a non-profit client that wants to add a firewall to the following configuration: T1 to outside --- Cisco 2600 router --- LAN The LAN has 3 subnets, a.b.c.d/25, d.e.f.g/25, and just recently 10.0.h.i/16 which is NATed in the Cisco router. The first two subnets are public IP addresses. Although the machines on the LAN have public IP addresses, there are no "known" public services being offered. I believe the firewall would be added between the Cisco 2600 router and the LAN like this: T1 --- Cisco 2600 --- Firewall --- LAN The firewall will run RedHat Linux 8.0 with iptables 1.2.6a. How do you configure the ethernet adapters to pass all the traffic for all three subnets? I'm assuming that the router now routes packets between 2 machines in different subnets on the LAN. Should the firewall assume this role? If you can point me to any documents or examples on the web that would help me understand how to solve this challenge I would be very grateful! Regards, Brad Morgan