Hi all, I have this situation. Our branches are connected to the head office using VPN and branches access the internet through HQ's proxy. The topology is like this: branch: 192.168.10.x --> branch router 192.168.10.1 --> HQ router 192.168.1.1 --> HQ proxy 192.168.1.250 --> Internet. In the proxy, we add this static routing: ip route add 192.168.10.0/24 via 192.168.1.1 ip route add 192.168.11.0/24 via 192.168.1.1 etc.... The proxy is FC4 with shorewall-2.4.6-1.fc4 and squid-2.5.STABLE11-3.FC4 Currently, all seems well. Branches can browse the internet (I fill in the proxy IP in the browser). Also they can access the mail server located on the same proxy box. The problem is: They cannot access their mailboxes at our ISP using Outlook Express. There is no problem if they access the mailserver on the proxy box. >From the branches, I can telnet 192.168.1.250 110, but I cannot telnet pop.myisp.net 110. Timed out. Is there anything I should do on the proxy box regarding shorewall or anything else? Thank you very much, -- Fajar Priyanto | Reg'd Linux User #327841 | Linux tutorial http://linux2.arinet.org 08:15:55 up 11 min, 2.6.14-1.1653_FC4 GNU/Linux Let's use OpenOffice. http://www.openoffice.org