Hi List I have a setup with multi isp and LSM this works very well. I am using one isp as backup and and the other as main, no balancing. When the ordinary Interface is down I would like to be able to reach the modem on port 80 on the ordinary IF. My problem is sorting out a dnat rule to get this working in a way that i can reach the isp2 modem through isp1 with dnat in the FW. Port fwd in isp1 modem is OK and I can see the traffic going out towards isp2 modem. I assume this has to do with def gw in the modem and masq in the FW or is it something else I miss? isp1 modem --------------- FW ----------------isp2 modem I am using shorewall 4.5.16.1 the log complains about sfilter? Thanks /GH ------------------------------------------------------------------------------ Android apps run on BlackBerry 10 Introducing the new BlackBerry 10.2.1 Runtime for Android apps. Now with support for Jelly Bean, Bluetooth, Mapview and more. Get your Android app in front of a whole new audience. Start now. http://pubads.g.doubleclick.net/gampad/clk?id=124407151&iu=/4140/ostg.clktrk