Now I have a weird problem I have testing with two networks. This trouble has to do with the hosts file. #ZONE HOST(S) OPTIONS loctw eth1:192.168.50.0/24 loctw ppp+:!192.168.50.0/24 locsa eth1:192.168.75.0/24 locsa ppp+:!192.168.75.0/24 loc eth1:192.168.25.0/24 #vpn3 ppp+:192.168.3.0/24 I can get through only one tunnel at a time. If I remove the explanation mark tunnel loctw I can then get tunnel locsa working and vs vrs if I remove the explanation mark from locsa and put back explation mark in loctw I can then get tunnel loctw working. And I have tryed both with and both without both without explanation mark both without shorewall blocks both tunnels both with one tunnel works :-( Thought I had the answer with zone order but still having trouble TL=127 ID=20618 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=49920 Jun 26 15:38:47 66-224-62-110 kernel: Shorewall:FORWARD:REJECT:IN=eth1 OUT=ppp0 SRC=192.168.50.2 DST=10.19.227.194 LEN=60 TOS=0x00 PREC=0x00 TTL=127 ID=20619 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=50176 Jun 26 15:38:48 66-224-62-110 kernel: Shorewall:FORWARD:REJECT:IN=eth1 OUT=ppp0 SRC=192.168.50.2 DST=10.19.227.194 LEN=60 TOS=0x00 PREC=0x00 TTL=127 ID=20620 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=50432 interfaces #ZONE INTERFACE BROADCAST OPTIONS net eth0 detect routefilter,norfc1918,tcpflags - eth1 192.168.25.255,192.168.50.255,192.168.75.255 - ppp+ zones #ZONE DISPLAY COMMENTS net Net Internet loctw Chevrolet Local Networks locsa Saturn Local Networks loc Local Local Networks #vpn3 Remote3 Remote Network 3 Mike