I've recently moved to an area that's still selling bridged DSL instead of routed, but lack-of-firewall is making me unhappy. I did some searching for information on setting up a packet-filtering bridge and the results seem to indicate that proxy arp is the way to do it. However, one of the two mini-HOWTOs I've turned up on proxy arp is aimed at using it to create a pseudo-router and the other is focused on a fairly specific uasage in conjuction with PPP/SLIP. What I currently have is 4 IP addresses hanging directly off one of the telco's class Cs, 255.255.255.0 netmask and all. What I want to have is one of these addresses acting as a firewall for the other three, without the other three noticing that they're no longer directly attached to the class C. Is proxy arp the way for me to go or is there a better way for me to get there? -- That's not gibberish... It's Linux. - Byers, The Lone Gunmen Geek Code 3.12: GCS d? s+: a C++ UL++++$ P++>+++ L+++>++++ E- W--(++) N+ o+ !K w--- O M- V? PS+ PE Y+ PGP t 5++ X+ R++ tv+ b+ DI++++ D G e* h r y+