I have a network with a /24 subnet and a /25 subnet. They both use the same gateway. I was hoping to put a Shorewall box in front of the network without changing the TCP/IP settings on my computers. I tried putting all of the addresses in the proxyarp file but it was too resource intensive for the firewall. If I just put on server with a few IPs behind the firewall the proxyarp file works fine. My Shorewall box has three network interfaces if that helps. I read about the proxyarp parameter that can be used in the interfaces file. Would the following work? Are there any other settings required? Is there an advantage to assigning the subnets to two interfaces or can they both share an interface? eth0 faces the router/internet norfc1918,routefilter,proxyarp ip x.y.24.2 eth1 connects to the /24 proxyarp ip x.y.24.3 gateway x.y.24.1 eth2 connects to the /25 proxyarp ip x.y.2.2 gateway x.y.24.1 Computers on both subnets use x.y.24.1 as a gateway. Steve Ledwith San Jose Web