When an interface name appears in the second column of an entry in /etc/shorewall/masq, Shorewall will detect all hosts and subnets routed through that interface and will masquerade traffic from those hosts and subnets. This is slightly more general than what I posted recently on the users list since it uses the routing table rather than the IP configuration of the interface. Example: /etc/shorewall/masq eth0 eth2 [root@gateway root]# ip route show dev eth2 192.168.1.0/24 scope link 192.168.10.0/24 proto kernel scope link src 192.168.10.254 [root@gateway root]# shorewall restart ... Masqueraded Subnets and Hosts: To 0.0.0.0/0 from 192.168.1.0/24 through eth0 using 206.124.146.176 To 0.0.0.0/0 from 192.168.10.0/24 through eth0 using 206.124.146.176 -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM: teastep \ http://www.shorewall.net ICQ: #60745924 \ teastep@shorewall.net