> To act as a router, where a box has two NIC's, and is connecting a > LAN with 192.168.0.0/24 to the Internet - is SNAT required? Or can > this be accomplished without NAT? 192.168.x.x is private space IP. You cannot route private space IP's on the internet: you need NAT to give internet access to your clients (or a proxy if you only need protocols for which proxies are available). This can be done with SNAT, MASQUARADE (some people need this instead of SNAT) and I've read somewhere it can also be done using "ip" but I'm not familiar doing that. Grts, Rob -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html