On Fri, 27 Jun 2003 20:50:58 -0700, Michael <freeware@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message <3EFD10A2.6020807@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>: > Dear netfilter gods, > > I have a configuration, so: > > /------------\ .0.2 .{0,1}.1 /----------\ 1.2.3.4 ( ) > | Web server |-----+-------------| firewall |---------( Internet ) > \------------/ | eth0 | Squid | eth1 ( ) > | \----------/ > /---------\ .1.2 | > | browser |--------/ > \---------/ > > - The 192.168.{0,1}. subnets run on the same wire. ..with what subnet? /23 oughtta work. -- ..med vennlig hilsen = with Kind Regards from Arnt... ;-) ...with a number of polar bear hunters in his ancestry... Scenarios always come in sets of three: best case, worst case, and just in case.