Well, the first problem is solved and the iptables rules now work fine. It turned out to be a permissions problem on one of the scripts used during the build. This just leaves the interaction between tproxy and IP masquerade when the latter is defined on a particular interface. Any suggestions for the best way to deal with that? Thanks! Tim __________________________________ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com