Tunnels were broken in 1.3.9 -- this version includes a fix. If you''ve already installed 1.3.9, there is an updated firewall script available on the errata page. -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \ teastep@shorewall.net