The thing is, i myself denied 192.168.30.1 so that users use their LAN dialers to establish VPN connections to get IP addresses 192.168.10.1/255.255.255.0 . Only then they can access the internet. regards, KG -- _______________________________________________ Graffiti.net free e-mail @ www.graffiti.net Check out our value-added Premium features, such as a 1 GB mailbox for just US$9.95 per year! Powered by Outblaze