We are using netfilter to run a broadband wireless network. For customers wanting a public IP, we simply forward a public IP to an internal NAT IP. We have one customer who wants to use PCAnywhere remotely to contact his machine on the inside. As usual, I simply forwarded a public IP to the private IP. On the private IP they have a Linksys BEFSR41 router. Basically it looks like this: public ip ---> Linux netfilter router ---> private ip ---> Linksys router ---> customer's network He is insisting that he needs to actually have a public IP, rather than just having our Linux router forward a public IP to a private. We have other customers doing similiar things, one even opening up ports for MS-SQL server, without a problem, so I'm presuming that this customer is coming from a position of ignorance. But before I start digging deeper, I need confirmation that this Linksys router is not some bizarre piece of hardware. -- A. Clausen techlsits@xxxxxxxxxxx