Hello, I setup a PPTP service on a Windows 2003 in LAN. Shorewall used NAT and macro and rules, for example: nat: 1.1.1.1 eth2:11 172.16.1.246 macro.VPN: PARAM - - tcp 1723 PARAM - - 47 rules: VPN/ACCEPT net dmz:172.16.1.246 or don''t use macro DNAT net loc:172.16.1.246 tcp 1723 - 1.1.1.1 DNAT net loc:172.16.1.246 47 - 1.1.1.1 I don''t use macro to setup rules that can effective for 1.1.1.1 but 1.1.1.2 can''t through. Could anyone tell me which rule of statement is correct for VPN setting ? Thanks Yahoo!香港提供網上安全攻略,教你如何防範黑客! 請前往 http://hk.promo.yahoo.com/security/ 了解更多! ------------------------------------------------------------------------------ Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise -Strategies to boost innovation and cut costs with open source participation -Receive a $600 discount off the registration fee with the source code: SFAD http://p.sf.net/sfu/XcvMzF8H