Greetings friends I hope I explain this correctly, Please try and help me here, I am seriously stuck I have two interfaces on a linux router {int} {ext} I have two PCs on either side of the router {chad} on {int} and {xxx}on {ext} {xxx} is my gw to the net, but {chad} needs to be the only PC that can access the internet fron the {int} side. The problem I am faced with is how do I do it, Here is what I have got so far: pt="/usr/sbin/iptables" ext="eth0" int="bond0" chad="192.168.2.5" etel="196.25.100.28" #Enable IP Forwarding echo "1" >> /proc/sys/net/ipv4/ip_forward #Clear All Tables ${ipt} -t filter -F ${ipt} -t nat -F ## allow all from local interfaces [localhost] ${ipt} -t filter -A INPUT -s 127.0.0.1 -j ACCEPT ##Allow {chad} to etel internet direct ${ipt} -t nat -A POSTROUTING -o ${ext} -s ${chad} -d ${etel} -p tcp -m tcp --dport 80 --state NEW,ESTABLISHED,RELATED -j ACCEPT ${ipt} -t filter -A FORWARD -p tcp -m tcp -s ${chad} -d ${etel} -o ${ext} --dport 80 -j MASQUERADE Please could someone help me with a simpler rule? -- Chadley Wilson Redhat Certified Technician Cert Number: 603004708291270 Pinnacle Micro Manufacturers of Proline Computers ==================================== Exercise freedom, Use LINUX =====================================