On Thursday 19 February 2004 1:06 pm, John Black wrote: > > $IPT -A POSTROUTING -t nat -s $IP_LAN_RNG -o $IF_NET -j SNAT --to-source > > $IP_NET > > i have that line in my firewall script. but it still doesn't mask my > internet work Please post your complete ruleset, including the definitions of variables such as $IP_LAN_RNG, so we can see if there's something wrong. By all means disguise any public IP's if you wish, but not so much that we can't tell which one is which (if you have more than one). Please also tell us how you are testing the rules and why you think it doesn't work (I know that may sound obvious, but every little helps...) Regards, Antony. -- Your work is both good and original. Unfortunately the parts that are good aren't original, and the parts that are original aren't good. - Samuel Johnson Please reply to the list; please don't CC me.