Hi all, I have a local LAN (10.35.50.0/24) which is connected to my linux firewall/gateway running iptables for internet access using an internet link. My LAN is connected to other subnets using a leased line. I had to add a few routes in my linux gateway (running iptables) to enable my LAN clients to access servers in other subnets and networks which are in the range of 10.0.0.0/8 and 97.0.0.0/8. Everything seems to be working fine. But recently I found that one of my LAN clients is running an Analog proxy. Few users sitting in other networks are using this proxy and able to access internet. My firewall is configured to allow traffic to internet from LAN only (10.35.50.0/24). As the proxy is inside this network, firewall allows the traffic. How do I stop this? I don't want users in other network to access internet through my iptables. Please help me. Thanks in advance. Regards, Manikandan