this is exactly what I am talking about.  You can’t say stupid things like “there is no need for 2 separate firewalls. it was needed before because Linux's iptables and win2k could not do bridging and NAT at the same time”.  This basically tells me you have no idea what I am talking about.  You need to be hardcore at this… not reciting rumors to me from a chat group.  You need to read the ipfilters howto file through at least once to have an intelligent conversation about this with me.  We need you on point!  You are going to be our “goto” guy for the network stuff and if you are going to talk to the talk you better be able to back it up. Remember… I WANT you to know all this!