Hello, My server is on Mandrake10.1 eth0 is WAN with static IP connected to 512Kbps DSL. We have two subnets : 192.168.0.0/24 192.168.21.0/24 Clients on both subnets will browse, send/ recieve mails and use MSN or Yahoo chat. Right now I am using eth1 as LAN as follows : eth1 - 192.168.0.0/24 eth1:1 - 192.168.21.0/24 Right now I am using shorewall. But I would like to switch to iptables. My question is having seperate network card for each subnets a better option. eth1 and eth2. Or eth1 and eth:1 is also fine Thanks Varun