Another Linux solution: Find a copy of StormFirewall. If a endloser like me can set it up anyone can. The default setting is plenty anal and ipmasq is default.The enduser still has to be able to configure a network.but not much else. I am running Newtella on a Win98SE box behind it (Doz box also is serving up web-cam images via FTP to website every 5 seconds.) With every port shut off to the outside world on the firewall, I made no modifications to my settings on the firewall. Now Stormix is dead plenty of people will be using it. It's just the way things go