Okay, I've got kernel-2.3.48 with netfilter-0.1.18 and things are working, but: How do I setup the plain-and-simple masquerading rules? With IPCHAINS I just followed the 3-liner like this: # ipchains -P forward DENY # ipchains -A forward -i ppp0 -j MASQ # echo 1 > /proc/sys/net/ipv4/ip_forward What is the equivalent for netfilter? -Eivind