Once again, I find shorewall to be a great product. I wanted to add a second IP address using once card, ie eth0:1, and then forward only what comes to that interface to a DMZ host. Shorewall easily handled my needs, with only 2 minutes of reading the FAQ, and 30 seconds of editing. Thanks again!