Hi!! i have some address into wan interface like: eth1:0 ip_wan0 eth1:1 ip_wan1 eth1:2 ip_wan3 eth1:3 ip_wan3 in this case put this into nat file: ip_wan0 eth1:0 ip_local0 no no ip_wan1 eth1:1 ip_local1 no no ip_wan2 eth1:2 ip_local2 no no ip_wan3 eth1:3 ip_local3 no no and into rules file: HTTP(ACCEPT) wan lan:ip_local0 HTTP(ACCEPT) wan lan:ip_local1 HTTP(ACCEPT) wan lan:ip_local1 HTTP(ACCEPT) wan lan:ip_local1 This work, but dont work when from lan try o access IP into wan interface line ip_wan0, into interface put this: lan eth0 routeback wan eth1 nosmurfs,routefilter,tcpflags eth1 is wan interface some missing!? or some is wrong!? i try with yes into nat option all interface and nothing. Thx. pd: shorewall version 4.5.21.9 ------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. Written by three acclaimed leaders in the field, this first edition is now available. Download your free book today! http://p.sf.net/sfu/NeoTech