In my configuration i have two ispec gateways behind two different routers across the internet. What ports must i forward on the routers to the vpn gateway for ipsec/shorwall to work? ie: without having to DMZ the linux firewall. My Config... =======LocalNet1 ----------------- shorewall Firewall/ipsec Gateway ----------------- SMC Router =======Internet =======Linksys Router ----------------- shorewall Firewall/ipsec Gateway ----------------- LocalNet1 ======= _________________________________________________________________ Add photos to your e-mail with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail