OK, this is not strictly a samba question. Is it possible to have a logon server behind a firewall? I've searched everywhere, and I can't any setting that would allow me to set a domain server IP on a win9x client. AFAIK, I have to have a PDC on the subnet of the win9x clients. Currently, I have the following setup: win9x clients } 192.168.0.x } firewall w/ multiple IPs on one IF > if to outside 192.168.142.x } || if between fw & server 192.168.135.x } samba server w/ multiple IPs on one IF } What I'd like to have is a DMZ setup: win9x clients } 192.168.0.x } firewall > IF to outside 192.168.142.x } w/ multiple IPs 192.168.135.x } on one IF > IF to samba server (182.168.129.x) } How do I get the win workstations to authenticate against samba server? I'm pretty sure this can be done, but I can't for the life of me find it in the archives. Thanks, --Yan