Hi, This is a bit of a thought experiment, but how hard would it be to build something similar to Shorewall-lite, but where the remote system is running VyOS? For those not familiar, VyOS is a Linux-based network operating system with routing, firewall and VPN functionality. However, I find its firewalling to be much less straightforward than Shorewall. So I was wondering if there could be a way to write Shorewall rules, but have the output be VyOS commands. Shorewall-lite also came to mind, in that it ships off the configuration to the firewall systems. Thanks, -- James Andrewartha Network & Projects Engineer Christ Church Grammar School Claremont, Western Australia Ph. (08) 9442 1757 Mob. 0424 160 877 ------------------------------------------------------------------------------