> $IPT -A POSTROUTING -t nat -s $IP_LAN_RNG -o $IF_NET -j SNAT --to-source > $IP_NET i have that line in my firewall script. but it still doesn't mask my internet work > That is for routing. If you want to secure your network and the router > itselfe it takes alot more .. like setting up a firewall :) > I have that part setup. All ports a block but the ones that I need. the firewall will drop all pings to the outside nic and inside nic. I just have to mask the internal network