Hi guys/gals .. as mentioned earlier I''m rebuilding my fw. I have shorewall/iptables/kernel blah blah all ready to go. I''ve written some udev rules so that I can have lan0, wave0, wave0:1, golive0, iconz0 as my interface names (might make for easy maintenance .. named after each ISP) The ongoing struggle is VPN. pptp with mppe is being a pig. ipsec/racoon didn''t work last time :( I read Tom''s docs at http://www.shorewall.net/OPENVPN.html and it doesn''t look all bad :) Is there anything that I should "look out" for? Ta. Paul.