It's perhaps on the low-end of what you'd like, but I've had good experience with floppyfw on a smaller scale. Its authors use it for PC labs of a few-hundred machines. The gimmick is that it runs from RAM in its entirety; it makes no use of a hard-drive. Boot it from RO floppy, CD or DVD depending on how many additional packages you feel you need. Performs NAT, masquerade, filtering, traffic-shaping; configured through a simplified parameter file. Doesn't need a console but can handle serial console or text-mode VGA. http://www.zelow.no/floppyfw * Nick Geovanis | IT Computing Svcs | Northwestern Univ | n-geovanis@ | northwestern.edu +------------------->