Hello everybody, -------------------------- | | WAN (x.x.x.58/28, default gateway - x.x.x.49) | FC2 e0 |-------------------------- ISP LAN | | -----------------------| e1 | DMZ 10.0.1.x | e2 |-------------------------- | | |-------------------------| I have 3 computers that need to have public addresses and their IP addresses are: A - x.x.x.50/28, DG - x.x.x.49 B - x.x.x.51/28, DG - x.x.x.49 C - x.x.x.55/28, DG - x.x.x.49 Now the problem is I do not understand how I will give access to these PCs from public without putting these PCs on a different subnet. Some firewalls such as sonicwall do not require an IP for the DMZ port. You can add any number of IPs behind the DMZ and it works. How is that done? Is it possible with Linux? If I connect them on the DMZ interface, should they all be put in a different subnet, probably with /29 bit mask? If I do it this way, should I use iptables & DNAT or should/can I use just the "routing" in linux? If you have a better way to do it, please let me know. Any help will be greatly appreciated. Thank you, Deepak Seshadri