Ian Clark wrote: > Sorry if I'm missing something but can't you just do:- > > map vr0 from 10.0.0.0/24 to ! 192.168.0.0/24 -> 0/32 > > I've not tried this but ipnat(5) seems to suggest it's a valid rule: Yes, that works! This seems to be the best solution. Thanks. -- Frank Wille