Hi Rodolfo, >Erik's configuration seems to do *exactly* what you want. I would >suggest working with that (you do know how to use his configuration automatically, right?), and then studying the iptables rules that >result from that configuration. I'd appreciate the explanation, many thanks... tia Chris