Solved. 2 things: root at cware1:/etc/shorewall # echo 1> /proc/sys/net/ipv4/ip_forward 1> is a special bash thing for redirecing stdout, so nothing was being written. 2. In shorewall.conf change IP_FORWARDING=Keep to IP_FORWARDING=On that will take care of echo "1"> /proc/sys/net/ipv4/ip_forward All is well. Carl K