fwbuilder and shorewall look like the best solutions I've seen so far. I'll give these a try. Thanks to all! Brad Kittredge wrote: >Shorewall is great at doing just what you're asking. I'm using it in a >similar situation. > >http://www.shorewall.net > > >