I am using iptables 1.3.3 I had some problems with multiple clients behind NAT(a simple MASQUERADE rule is set) connecting to the same VPN server. ONly one client can connect at a time. I have enables the CONFIG_IP_NF_PPTP and CONFIG_IP_NF_CT_PROTO_GRE options in kernel. I have read a few posts about this issue in the list from as early as in 2003. But could not find a conclusion. Could you guys please clarify? Is this scenario supported by iptables? If not, is there a way to get around this issue? thanks Salim