> >Okay, so that rule is going to hide your 192.168.0.0/24 >network behind the public address of the firewall for all >packets going to addresses in the range 161.x.x.x/21 (ie 8 >Class C's in size). 8 Class C's? >How are you testing this and deciding it doesn't work? im testing it with my windows machine going to the msn chat rooms, because i know i will show you what ip address you are coming from. is there a better way to check it. >(By the way, why are you only translating packets which are >going to (presumably) your ISP? What about packets going >anywhere else on the Internet?). I thought that translated all of the packets? How is it only translating packets to the ISP? john http://www.arbbs.net/