Hi: I beg to differ. Ipmasqadm works fine for me, it is mentioned without proviso in the ipmasquerading howto, and it even mentions ipchains in the manpage. Doesn't look out-dated to me. Perhaps you are thinking of ipfwadm? Geoff.