Its been quite a saga - I have lost my (limited) hacking instinct. Having failed to get ipmasq to work on 2.2.19 (possibly something to do with eth0 eth1 being reversed i.e. eth0 on LAN side), I am now on the 2.4.14 precompiled and hoping for better things.
I want to get on with other things, no desire to config my own kernel, compile modules, hack the interfaces file to switch eth{0,1} ... so, please can someone offer a simple solution out of the box solution - all I want to do is give internet access to a connected machine. Embarrasing when it is such a no-brainer to config winroute on a blows box. BTW Osamu Aoki <[EMAIL PROTECTED]> advised: I have followings in /etc/modules # net/ipv-4 # ip_gre # ipip # ## net/ipv-4/netfilter # iptable (in order) # ip_tables # ip_conntrack # ip_conntrack_ftp # iptable_nat # iptable_filter # iptable_mangle # # # ip_nat_ftp # ip_queue # # # ipt_LOG # ipt_MARK # ipt_MASQUERADE # ipt_MIRROR # ipt_REDIRECT # ipt_REJECT # ipt_TCPMSS # ipt_TOS # ipt_limit # ipt_mac # ipt_mark # ipt_multiport # ipt_owner # ipt_state # ipt_tcpmss # ipt_tos # ipt_unclean # # # ipchains # ipfwadm # -- Eric Smith