Hello! I am wondering about the hard-coded Masquerading Port-Range in net/ipv4/netfilter/ip_fw_compat_masq.c (kernel 2.4.0) In the 2.2.x Kernel hirarchy the Masquerading Ports could be changed in an include file. It doesnt look so pretty... range = ((struct ip_nat_multi_range) { 1, {{IP_NAT_RANGE_MAP_IPS|IP_NAT_RANGE_PROTO_SPECIFIED, newsrc, newsrc, { htons(61000) }, { htons(65095) } } } }); Greets... Thomas Kerpe