Subject: Routing from and to the internet This is from my working ER4 (Ubiquity EdgeRouter) ----------------------------- firewall modify SOURCE_ROUTE { rule 10 { action modify description "traffic to ampr" modify { table 5 } source { address 44.131.252.64/28 } } } firewall name 44Net_IN { default-action drop description "44Net in" rule 10 { action accept description "Allow established/related" log disable state { established enable related enable } } rule 20 { action accept description ICMP log disable protocol icmp } rule 30 { action drop description "Drop invalid state" state { invalid enable } } } interfaces ethernet eth3 { address 44.131.252.65/28 description 44.131.252.65/28 duplex auto firewall { in { modify SOURCE_ROUTE } local { } out { } } ip { } speed auto } interfaces tunnel tun0 { description "Tunnel to AMPRNet" encapsulation ipip firewall { in { name 44Net_IN } } ip { } local-ip 80.235.222.210 multicast disable remote-ip 169.228.34.84 ttl 255 } protocols static { table 5 { interface-route 0.0.0.0/0 { next-hop-interface tun0 { } } } } Shout if you get stuck! Regards Andy - M0MUX