>Shouldn't a firewall ideally go between the modem and the >IP-masquerading part? Yes, which is why I don't use the hub on my ADSL router. My setup is something like: Internet -> ADSL router -> OpenBSD firewall -> Switch -> Rest of network Tet -- Gllug mailing list - Gllug at linux.co.uk http://list.ftech.net/mailman/listinfo/gllug