>his works theoretically as long as the 32+ IP's are not on the same subnet >as the external IP of your firewall... Well I'm looking at sites which I work for that have their one C class so a couple are 254 IPs.. This is why it's easier to add routes to a router than compile a huge list on the firewall. At least the router doesn't do anything else but route and the firewall doesn't need anything else but filter/forward. anyhow, one day I'll try this out and see the results.