i've mentioned this site to a few people, thought i'd post it to the list as well for reference. it helps create a two-interface iptables firewall/NAT setup in about 90 seconds, the resulting bash script is quite thorough and well commented, and the PHP source code is provided. http://morizot.net/firewall/ jason