I have a Freeswan gateway setup which is also my firewall (IPTABLES). The people on the LAN network (192.168.1.0) can get to the POP3 server out on the Public internet. But when I connect a client via the IPSEC tunnel then I cannot get POP3 mail. This is what I have in my rc.firewall script to allow my LAN client s to get their POP3 - iptables -t nat -A POSTROUTING -p tcp --dport 110 -o eth0 -s 192.168.1.0/24 -j SNAT --to $external_ip The IPSEC clients are static IP addresses within this range 10.2.67.0, do I need to add a line for the IPSEC clients? Doug