Hi, I have a poptop w2k client behind a newly installed iptables firewall, now seeing as I blew away my last ruleset, I can't for the life of me think what i have to do to make it work. It is masq'ing everything and allowing incoming protocol 47, iptable_nat module is loaded and working. Any hinst on what I could have missed. thanks mick