Ben, Thanks for the link (http://www.bbiagent.net/en/index.html) for the floppy based firewall. My Christmas project (one of several) was to replace my NT based firewall and this one did very nicely. The script based download is nice, but if you are going to use ISA based NICs, make sure you know the IRQ and I/O address, even though they say it can probe, that only works on PCI NICs. The administration is simple and the support via e-mail is amazing. The doco's are pretty thin, so when I sent an e-mail on the evening of the 23rd, I expected to hear sometime today or tomorrow. They replied within 2 hours! The only complaint I have is that it doesn't remember the port forwarding rules or special port blocking on reboot (or if it does, I haven't figured it out yet). It boots very nicely headless and all the admin is via a Java enabled browser on the local network --can't use Konqueror :( It is not https, so if that is a concern to anybody, don't use this one. It does DNS proxy and can be a DHCP server for the local network (I use static, so didn't try it). I am using it with RoadRunner cable and it had no problems getting the IP info. It even tells the length of the lease and renewal time. It will run on anything 386 or better with 8 MB of RAM, but I am running it on a P100 with shared video memory, so it is actually running on 7 MB and according to the stats it still has 400 KB free. I am tempted to dig out that 386 I have lying around, just to see if it will work, but I don't think I have enough memory in it :) It seems to perform well, I only have a 5 node network, but my son does some heavy downloading, and it seemed to hold up under the load. James jspinti at dartdist dot com 952-368-3278 ext. 396 952-368-3255 (fax)